Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This page is a master list of all CIM compliant event types released with Splunk. This page will always contain the mappings for the latest Splunk app release.

Event Type

CIM Model(s)

Last Updated

SM20

AL08

Authentication
  • Network Sessions

7.1.0

STRUST

  • Certificates

7

ariba_audit_log

  • Authentication

  • Change

  • Data Access

8.1.

0

1

SM21

ATRA_

LOG

STATE

Alerts
  • Data Access

7.1.0

SUIM

CDPOS

  • Change

7.1.0

SM19

DEVACCESS

Change
  • Data Access

7.1.0

ST06

  • Performance

    • Memory

    • Storage

    • CPU

  • Network Traffic

E070

  • Change

7.1.0

ROLE

GRC_

AUTH

LOGS

  • Data Access

7.1.0

SM04

  • Network Sessions

  • Performance

7.1.0

SRAL

Alerts

HDB_CERT_LIST

  • Certificates

    • SSL

8.3.0

HDB_DBC_USRPRV

  • Authentication

7.1.0

SU01

Authentication

HDB_DBCC_AUDIT

  • Data Access

7.1.0

SU53

ROLE_AUTH

  • Data Access

7.1.0

AL08

Network Sessions

RSAU_CHECK

  • Change

7.1.0

RSUSR003

  • Alerts

7.1.0

RSUSR200

  • Authentication

7.1.0

DEVACCESS

Data Access

RZ10_LOG

  • Change

7.1.0

SNOTE

SCU3

Vulnerabilities
  • Change

7.1.0

STMS

Updates

SE37_LOG

  • Data Access

7.

1

3.0

SM59

SECPOL_

RFCDES

LOG

Endpoint
  • Change

  • Ports

  • Processes

7.1.0

STAD
  • Databases

  • SM04

    • Network Sessions

    • Performance

    • Memory

    • CPU

    7.1.0

    ATRA_STATE

    Data Access

    SM19

    • Change

    7.1.0

    CDPOS

    SM20

    Change
    • Authentication

    7.1.0

    E070

    SM21_LOG

    Change
    • Alerts

    7.

    1

    3.0

    HDB_DBCC_AUDIT

    Data Access

    SM59_RFCDES

    • Endpoint

      • Ports

      • Processes

    7.1.0

    USH02

    SM69

    • Change

    7.

    1

    3.0

    UCON_LOG

    SNOTE

    Change
    • Vulnerabilities

    7.1.0

    RZ10_LOG

    SRAL

    Change
    • Alerts

    7.1.0

    HDB_DBC_USRPRV

    Authentication

    ST06

    • Performance

      • Memory

      • Storage

      • CPU

    • Network Traffic

    7.1.0

    SCU3

    STAD

    • Change

    7.1.0

    SECPOL_LOG

    Change
    • Performance

      • Memory

      • CPU

    • Databases

    7.1.0

    STATS

    • Database

      • Session Info

      • Lock Info

    • Performance

      • Memory

      • CPU

    • Network Traffic

    7.1.0

    STMS

    • Updates

    7.1.0

    STMS_TPLOG

    • Change

    7.3.0

    STRUST

    • Certificates

      • SSL

    7.1.0

    GRC_LOGS

    STRUST_HISTORY

    • Change

    8.0.1

    SU01

    • Authentication

    7.1.0

    SU53

    • Data Access

    7.1.0

    RSAU_CHECK

    SUIM

    • Change

    7.3.0

    UCON_LOG

    • Change

    7.3.0

    USH02

    • Change

    7.1.0