Field Extraction and CIM Mapping
Author and validate Splunk field and CIM mappingsBuilt by Splunk LLCInstallation
npx skills add splunk/splunk-agent-skills --skill field-extraction-and-cim-mappingSkill instructions
Produce documentation-backed, evidence-bound guidance for search-time field extraction and CIM normalization. Draft text artifacts only. Never authenticate to, modify, install on, or deploy to a Splunk environment.
When to Use
Use this skill when the primary outcome is documented extraction guidance, an evidence-bound extraction draft, a semantic CIM mapping, validation steps, or a normalization-gap diagnosis. Apply the boundaries below to adjacent work.