https://community.splunk.com/t5/All-Apps-and-Add-ons/Real-time-mode-not-working-I-get-an-error-the-dataset-Cisco-IOS/m-p/416743#M50828 <P>the non real time mode works fine. any ideas why I would get this error? the sourcetype is cisco:ios not sure why it would need the index and if it did, would the datamodel already have it in it by default?</P> Thu, 24 May 2018 01:43:06 GMT jlstanley 2018-05-24T01:43:06Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Real-time-mode-not-working-I-get-an-error-the-dataset-Cisco-IOS/m-p/416743#M50828 <P>the non real time mode works fine. any ideas why I would get this error? the sourcetype is cisco:ios not sure why it would need the index and if it did, would the datamodel already have it in it by default?</P> Thu, 24 May 2018 01:43:06 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Real-time-mode-not-working-I-get-an-error-the-dataset-Cisco-IOS/m-p/416743#M50828 jlstanley 2018-05-24T01:43:06Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Real-time-mode-not-working-I-get-an-error-the-dataset-Cisco-IOS/m-p/416744#M50829 <P>Did you ever find a resolution to this? I'm having this exact same issue.</P> Fri, 05 Oct 2018 17:57:18 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Real-time-mode-not-working-I-get-an-error-the-dataset-Cisco-IOS/m-p/416744#M50829 squigley 2018-10-05T17:57:18Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Real-time-mode-not-working-I-get-an-error-the-dataset-Cisco-IOS/m-p/416745#M50830 <P>The way I resolved this issue was to do the following </P> <P>Go to "Data models" choose the Cisco app from the app drop down menu,<BR /> Click "Cisco_IOS_Event" &gt; on the far right click the "Add Field" drop down and click "Auto Extracted",</P> <P>You should then get a list of the available fields, <BR /> I then just selected the index field and hit save. </P> Tue, 29 Sep 2020 22:34:31 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Real-time-mode-not-working-I-get-an-error-the-dataset-Cisco-IOS/m-p/416745#M50830 splunkseen 2020-09-29T22:34:31Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Real-time-mode-not-working-I-get-an-error-the-dataset-Cisco-IOS/m-p/416746#M50831 <P>This should be fixed in the latest version which is 2.5.6 without having to do any customizations. Please let me know if this is not the case.</P> Mon, 07 Jan 2019 21:17:01 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Real-time-mode-not-working-I-get-an-error-the-dataset-Cisco-IOS/m-p/416746#M50831 mikaelbje 2019-01-07T21:17:01Z