get_cim_reference
Retrieve detailed Splunk CIM data model documentation including field specifications, mappings, tagging requirements, and implementation examples for configuring data normalization.
Instructions
Get detailed Splunk CIM data model documentation with field specifications and configuration examples. Returns comprehensive reference including field mappings, tagging requirements, and implementation guidance.
Args: model (str): CIM data model name. Use list_cim_data_models() to see all available models. Examples: 'authentication', 'network-traffic', 'malware' version (str, optional): CIM version (default: 'latest'). Options: '6.1', '6.0', '5.3', '5.2', '5.1', 'latest'
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| model | Yes | ||
| version | No | latest |