This Splunk app was developed with one goal in mind, reduce amount of time spent validating Splunk Common Information Model (CIM) compliance of technology add-ons (TA's). Use of this app simplifies validation process in several ways:
- Identifies fields that are required, but missing
- Validates data confirms to expected CIM values
- Rapid prototyping and validation
Validation of non CIM-data models works too. However, you will likely see no validation regex was found for fields that exist outside of the typical CIM field names.
Note that this is the CDI Edition of the CIM Validator
This project is hosted on GitHub, https://github.com/Kintyre/SA-cim_vladiator
The upstream project is located at https://github.com/hire-vladimir/SA-cim_vladiator/
As of 2.2.0, the installation folder has been changed to SA-cdi_cim_validator
You can also build a local package like so:
# Download from git
git clone https://github.com/Kintyre/SA-cim_vladiator
cd SA-cim_vladiator
# Launch the build process
./build.sh
# Install into a local Splunk instance
$SPLUNK_HOME/bin/splunk install app $(<.latest_release)
App installation is simple, and only needs to be present on the search head. Documentation around app installation can be found at http://docs.splunk.com/Documentation/AddOns/released/Overview/Singleserverinstall
App installation can be completed using the self-service capabilities. Documentation around app installation can be found at https://docs.splunk.com/Documentation/SplunkCloud/latest/User/PrivateApps
App was developed for use with Splunk 8.x+, 9.x+
- Lowell Alleman (CDI, Kintyre)
- araman-m
- Splunk is a registered trademark of Splunk, Inc.