Splunk App for CEF

The Splunk App for CEF enables you to augment, filter, and aggregate Splunk Enterprise events, transforming them into the Common Event Format (CEF), an open log management standard. Gain faster, easier, and deeper insights across all machine data, simply map Splunk fields to CEF fields without knowledge of the Splunk search syntax, and add context to events by using Splunk Add-ons and custom lookups.