Options like "tsidx files", "search macros", and "workflow actions" are not typically considered part of the core functionality of the CIM add-on.
he Common Information Model (CIM) add-on in Splunk primarily provides a standardized set of field names and event category tags to help normalize data from different sources, making it easier to analyze across various systems
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
S_E_A_N
2 weeks, 5 days agovoiddraco
3 months, 2 weeks ago