Troubleshooting

I'm not seeing any CIM fields being extracted for my OCSF data

• Ensure the sourcetype is configured on the Configuration page of the OCSF-CIM Add-On for Splunk