Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This page is a master list of all CIM compliant event types released with Splunk. This page will always contain the mappings for the latest Splunk app release.

Event Type

CIM Model(s)

Last Updated

SM20

AL08

Authentication
  • Network Sessions

7.1.0

STRUST

  • Certificates

7

ariba_audit_log

  • Authentication

  • Change

  • Data Access

8.1.

0

1

SM21

ATRA_

LOG

STATE

Alerts
  • Data Access

7.

3

1.0

SUIM

CDPOS

  • Change

7.

3

1.0

SM19

DEVACCESS

Change
  • Data Access

7.1.0

ST06

  • Performance

    • Memory

    • Storage

    • CPU

  • Network Traffic

E070

  • Change

7.1.0

ROLE

GRC_

AUTH

LOGS

  • Data Access

7.1.0

SM04

  • Network Sessions

  • Performance

7.1.0

SRAL

Alerts

HDB_CERT_LIST

  • Certificates

    • SSL

8.3.0

HDB_DBC_USRPRV

  • Authentication

7.1.0

SU01

Authentication

HDB_DBCC_AUDIT

  • Data Access

7.1.0

SU53

ROLE_AUTH

  • Data Access

7.1.0

AL08

Network Sessions

RSAU_CHECK

  • Change

7.1.0

RSUSR003

  • Alerts

7.1.0

RSUSR200

  • Authentication

7.1.0

DEVACCESS

Data Access

RZ10_LOG

  • Change

7.1.0

SNOTE

SCU3

Vulnerabilities
  • Change

7.1.0

STMS

Updates

SE37_LOG

  • Data Access

7.

1

3.0

SM59

SECPOL_

RFCDES

LOG

Endpoint

Ports
  • Change

  • Processes

  • 7.1.0

    STAD

    SM04

    • Network Sessions

    • Performance

    Memory
  • Databases

  • CPU

  • 7.1.0

    ATRA_STATE

    Data Access

    SM19

    • Change

    7.1.0

    CDPOS

    SM20

    Change
    • Authentication

    7.1.0

    E070

    SM21_LOG

    Change
    • Alerts

    7.

    1

    3.0

    HDB

    SM59_

    DBCC_AUDIT
    • Data Access

    7.1.0

    USH02

    • Change

    RFCDES

    • Endpoint

      • Ports

      • Processes

    7.1.0

    UCON_LOG

    SM69

    • Change

    7.3.0

    RZ10_LOG

    SNOTE

    Change
    • Vulnerabilities

    7.1.0

    HDB_DBC_USRPRV

    Authentication

    SRAL

    • Alerts

    7.1.0

    SCU3

    Change

    ST06

    • Performance

      • Memory

      • Storage

      • CPU

    • Network Traffic

    7.1.0

    SECPOL_LOG

    Change

    STAD

    • Performance

      • Memory

      • CPU

    • Databases

    7.1.0

    STATS

    • Database

      • Session Info

      • Lock Info

    • Performance

      • Memory

      • CPU

    • Network Traffic

    7.1.0

    STMS

    • Updates

    7.1.0

    GRC_LOGS

    Data Access

    STMS_TPLOG

    • Change

    7.3.0

    STRUST

    • Certificates

      • SSL

    7.1.0

    RSAU

    STRUST_

    CHECK

    HISTORY

    • Change

    8.0.1

    SU01

    • Authentication

    7.1.0

    SU53

    • Data Access

    7.1.0

    SM69

    SUIM

    • Change

    7.3.0

    SE37

    UCON_LOG

    Data Access
    • Change

    7.3.0

    STMS_TPLOG

    USH02

    • Change

    7.

    3

    1.0