Splunk Core Certified Power User — Question 178

Which of the following is included with the Common Information Model (CIM) add-on?

Answer options

• A. tsidx files
• B. Search macros
• C. Workflow actions
• D. Event category tags

Correct answer: D

Explanation

The correct answer is D, as Event category tags are specifically included with the CIM add-on to enhance data categorization. Options A, B, and C, while useful in their own right, do not pertain to the CIM add-on and serve different purposes in data handling and management.