GitLab Self-Managed Add-on for Splunk (CIM)

Parses and CIM-normalizes self-managed GitLab logs (Authentication and Web data models).Built by Cyberfox DEVELOPER

Default Version 1.0.0

September 28, 2026

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0

CIM Version: 8.x, 6.x, 5.x

Rating

(1)

Support

Developer Supported

Free, open add-on that parses and CIM-normalizes logs from self-managed GitLab: audit, application, production, API, GitLab Shell, NGINX and Sidekiq. Successful logins and SSH Git operations are mapped to the Authentication data model, web and API requests to the Web data model. Contains configuration files only, with no UI or scripts.