The Splunk for Snare application supports events from Snare. It normalizes the field names to the common information model (CIM) and defines eventtypes compatible with the CIM.
See http://www.splunk.com/doc/latest/admin/InstallSplunkApps for generic instructions of how to install and configure this add-on.