Installation

The following page will walk you through installing and setting up the OCSF-CIM Add-On for Splunk in your environment.

Prerequisites

• Common Information Model (CIM) 5.X

Installation

Warning

Install the OCSF-CIM Add-On to your search heads only.

1. Download the app from Splunkbase (splunkbase.splunk.com/app/6841).

2. Install the OCSF-CIM Add-On for Splunk to your search heads only.

3. Refer to Installing add-ons for detailed instructions describing how to install a Splunk add-on in the following deployment scenarios:

   • Single-instance Splunk Enterprise
   • Distributed Splunk Enterprise
   • Splunk Cloud Platform