Versions Compared

Old Version 5

changes.mady.by.user Seth Marek

Saved on

compared with

New Version 6

changes.mady.by.user Seth Marek

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This page is a master list of all CIM compliant event types released with Splunk. This page will always contain the mappings for the latest Splunk app release.

Event Type

CIM Model(s)

Last Updated

SM20

AL08

Authentication

  • Network Sessions

7.1.0

STRUST

Certificates

ATRA_STATE

  • Data Access

7.1.0

SM21_LOG

  • Alerts

7.3.0

SUIM

CDPOS

  • Change

7.

3

1.0

SM19

DEVACCESS

Change

  • Data Access

7.1.0

ST06

  • Performance

    • Memory

    • Storage

    • CPU

    • Network Traffic

    E070

    • Change

    7.1.0

    ROLE

    GRC_

    AUTH

    LOGS

    • Data Access

    7.1.0

    SM04

  • Network Sessions

    • Performance

    HDB_DBC_USRPRV

    • Authentication

    7.1.0

    SRAL

    Alerts

    HDB_DBCC_AUDIT

    • Data Access

    7.1.0

    SU01

    • Authentication

    7.1.0

    SU53

    ROLE_AUTH

    • Data Access

    7.1.0

    AL08

    Network Sessions

    RSAU_CHECK

    • Change

    7.1.0

    RSUSR003

    • Alerts

    7.1.0

    RSUSR200

    • Authentication

    7.1.0

    DEVACCESS

    Data Access

    RZ10_LOG

    • Change

    7.1.0

    SNOTE

    SCU3

    Vulnerabilities

    • Change

    7.1.0

    STMS

    Updates

    SE37_LOG

    • Data Access

    7.

    1

    3.0

    SM59

    SECPOL_

    RFCDES

    Endpoint

  • Ports

    • Processes

    LOG

    • Change

    7.1.0

    SM04

    STAD

  • Databases

    • Network Sessions

    • Performance

    • Memory

    • CPU

    7.1.0

    ATRA_STATE

    Data Access

    SM19

    • Change

    7.1.0

    CDPOS

    SM20

    Change

    • Authentication

    7.1.0

    E070

    SM21_LOG

    Change

    • Alerts

    7.

    1

    3.0

    HDB

    SM59_

    DBCC_AUDIT

    • Data Access

    7.1.0

    USH02

    Change

    RFCDES

    • Endpoint

      • Ports

      • Processes

    7.1.0

    UCON_LOG

    SM69

    • Change

    7.3.0

    RZ10_LOG

    SNOTE

    Change

    • Vulnerabilities

    7.1.0

    HDB_DBC_USRPRV

    Authentication

    SRAL

    • Alerts

    7.1.0

    SCU3

    Change

    ST06

    • Performance

      • Memory

      • Storage

      • CPU

    • Network Traffic

    7.1.0

    SECPOL_LOG

    Change

    STAD

    • Performance

      • Memory

      • CPU

    • Databases

    7.1.0

    STATS

    • Database

      • Session Info

      • Lock Info

    • Performance

      • Memory

      • CPU

    • Network Traffic

    7.1.0

    STMS

    • Updates

    7.1.0

    GRC_LOGS

    Data Access

    STMS_TPLOG

    • Change

    7.3.0

    STRUST

    • Certificates

    7.1.0

    RSAU

    STRUST_

    CHECK

    HISTORY

    • Change

    8.0.0

    SU01

    • Authentication

    7.1.0

    SU53

    • Data Access

    7.1.0

    SM69

    SUIM

    • Change

    7.3.0

    SE37

    UCON_LOG

    Data Access

    • Change

    7.3.0

    STMS_TPLOG

    USH02

    • Change

    7.

    3

    1.0