https://community.splunk.com/t5/Getting-Data-In/Converting-JSON-results-to-DataModel-structure/m-p/305909#M57701 <P>I would suggest using the JSON of the existing data models from the common information model app as a guide. </P> <P>This link mentions where and what each .json file is called. <BR /> <A href="http://docs.splunk.com/Documentation/CIM/4.7.0/User/Overview">http://docs.splunk.com/Documentation/CIM/4.7.0/User/Overview</A></P> Thu, 16 Feb 2017 12:45:29 GMT starcher 2017-02-16T12:45:29Z https://community.splunk.com/t5/Getting-Data-In/Converting-JSON-results-to-DataModel-structure/m-p/305908#M57700 <P>Hello, Splunkers!</P> <P>I have a REST query resultset and would like to kind of "convert" it to a DataSet structure to automatically create a DataModel that fits perfectly my homemade application logs.<BR /> Does anyone know how I can do this?</P> <P>Thank you!</P> Thu, 16 Feb 2017 12:18:41 GMT https://community.splunk.com/t5/Getting-Data-In/Converting-JSON-results-to-DataModel-structure/m-p/305908#M57700 fabioportes 2017-02-16T12:18:41Z https://community.splunk.com/t5/Getting-Data-In/Converting-JSON-results-to-DataModel-structure/m-p/305909#M57701 <P>I would suggest using the JSON of the existing data models from the common information model app as a guide. </P> <P>This link mentions where and what each .json file is called. <BR /> <A href="http://docs.splunk.com/Documentation/CIM/4.7.0/User/Overview">http://docs.splunk.com/Documentation/CIM/4.7.0/User/Overview</A></P> Thu, 16 Feb 2017 12:45:29 GMT https://community.splunk.com/t5/Getting-Data-In/Converting-JSON-results-to-DataModel-structure/m-p/305909#M57701 starcher 2017-02-16T12:45:29Z https://community.splunk.com/t5/Getting-Data-In/Converting-JSON-results-to-DataModel-structure/m-p/305910#M57702 <P>Thank you for spending some time helping users.<BR /> Actually, it is related to a form filled by users, not related to technology products, like CIM seems to cover.</P> Thu, 16 Feb 2017 12:51:40 GMT https://community.splunk.com/t5/Getting-Data-In/Converting-JSON-results-to-DataModel-structure/m-p/305910#M57702 fabioportes 2017-02-16T12:51:40Z https://community.splunk.com/t5/Getting-Data-In/Converting-JSON-results-to-DataModel-structure/m-p/305911#M57703 <P>It doesn't have to be CIM. The Json files show how they are structured. I would use them as a guide for your own model. </P> Thu, 16 Feb 2017 12:55:34 GMT https://community.splunk.com/t5/Getting-Data-In/Converting-JSON-results-to-DataModel-structure/m-p/305911#M57703 starcher 2017-02-16T12:55:34Z