SA-cim_vladiator

SA-cim_vladiator copied to clipboard

Vladimir, I'm finally getting around to a PR! Here's a collection of enhancements that I've been working with locally that would be nice to see in the upstream version, if...

lowell80

I run a Splunk User Group and the SA-cim-vladiator / SA-cim_validator was requested for a topic of a meeting by a user. Would you be interested in speaking at one...

spool3r

Trying to get Splunk Cloud Approval

2

So I wanted to see if you can help me make these updates by suggestions etc. I would need to fix the items below in order to use your app...

JonLittleIT

eventtype / tag analysis

1

a summary view of all the eventtypes that make up a tag would be useful such that it could be tackled by individual ETs

hire-vladimir

Multiple data model names conflicting with Splunk CIM listing

1

While using the app, came across the following: **Domain Analysis** - [not official data model](http://docs.splunk.com/Documentation/CIM/4.11.0/User/Overview) **Compute Inventory** - that's the name of the .json file, can it be named "Inventory"...

kmfpo

When valid IPv6 addresses are present in the dest_ip, dest, src_ip, or src fields, the CIM Validator flags all of the IPv6 addresses as "unexpected values" and marks that field...

michael-berg

The DM search seems to now call fields as DM.* type format, causing no values to be returned. Need to enhance the logic to perform `| rename .* AS *`...

hire-vladimir

Re-checking

1

I would love to be able to be notified if my data has changed. The app is great, and it would be great to be able to specify a list...

dveuve

Presently, logic is controlled by a case() statement, meaning only one "outcome" can be shown. This is fine, however, should the validatator show multiple outcomes? present: `< 90% coverage` possible:...

hire-vladimir

Can we please update the sharing context? This wonderful app uses the knowledge objects, I find myself updating the sharing permissions regularly. https://splunkbase.splunk.com/app/6286

dluxtron