Why Should I Use CIM Datamodels?
Using datamodels simplifies searching and can dramatically improve performance. This post is a breakdown of how this works, to answer the common question, "why should I use data models in Splunk?"