CIM (Common Information Model) data models in Splunk are designed to normalize data across various sources, allowing for consistent searching and reporting. By default, these data models are configured to search across all indexed data to ensure they capture all relevant information. This default behavior enables comprehensive searches without needing to specify individual indexes.