Which of the following data model are included In the Splunk Common Information Model (CIM) add-on? (select all that apply)

Which of the following data model are included In the Splunk Common Information Model (CIM) add-on? (select all that apply)
A . Alerts
B . Email
C . Database
D . User permissions

View Answer

Answer: A, B, C

Explanation:

Reference: https://docs.splunk.com/Documentation/CIM/4.15.0/User/Overview

The Splunk Common Information Model (CIM) add-on is a collection of pre-built data models and knowledge objects that help you normalize your data from different sources and make it easier to analyze and report on it3. The CIM add-on includes several data models that cover various domains such as Alerts, Email, Database, Network Traffic, Web and more3. Therefore, options A, B and C are correct because they are names of some of the data models included in the CIM add-on. Option D is incorrect because User permissions is not a name of a data model in the CIM add-on.