https://community.splunk.com/t5/Knowledge-Management/How-to-delete-data-from-the-data-model-and-force-it-to-rebuild/m-p/137490#M1395 <P>Thanks for your answer Aljohnson, In fact I was only disabling/enabling the DM and then rebuilding it but that wasn't helping. In order to force it to rebuild the acceleration period <STRONG>must be modified</STRONG> it seems or else the DM would simply keep the same data.</P> Mon, 16 Feb 2015 09:33:47 GMT DavidHourani 2015-02-16T09:33:47Z https://community.splunk.com/t5/Knowledge-Management/How-to-delete-data-from-the-data-model-and-force-it-to-rebuild/m-p/137488#M1393 <P>Hello,</P> <P>I am trying to clear my data model but I can't seem to get it to rebuild. Every time i click rebuild I get the same data I had before the rebuild even though the event that is being accelerated has changed.</P> <P>Any idea how I can delete everything in the data model or at least try to get the new data to be taken into account ? </P> <P>Best regards,<BR /> David</P> Fri, 13 Feb 2015 15:49:11 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-delete-data-from-the-data-model-and-force-it-to-rebuild/m-p/137488#M1393 DavidHourani 2015-02-13T15:49:11Z https://community.splunk.com/t5/Knowledge-Management/How-to-delete-data-from-the-data-model-and-force-it-to-rebuild/m-p/137489#M1394 <H4>Splunk Enterprise automatically rebuilds summaries when you disable and then reenable acceleration for a summary (to edit the data model, for example) - <A href="http://docs.splunk.com/Documentation/Splunk/6.2.1/Knowledge/Managedatamodels#Enable_data_model_acceleration">here</A></H4> <UL> <LI>Click Update to refresh the acceleration summary detail information.</LI> </UL> <H2> - Click Edit to open the Edit Acceleration dialog and change the Summary Range or disable acceleration for the data model altogether.</H2> <P>Now if you still want to delete it:</P> <P>First, make sure you <STRONG>back up your data model</STRONG> by clicking <STRONG>Download</STRONG> in the top right while editing the data model objects.</P> <P>Secondly, see <A href="http://docs.splunk.com/Documentation/Splunk/6.2.1/Knowledge/Managedatamodels#Delete_a_data_model">this portion</A> on how to delete the data model. </P> <P>Thirdly, upload your data model again and rebuild the acceleration.</P> Fri, 13 Feb 2015 22:27:39 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-delete-data-from-the-data-model-and-force-it-to-rebuild/m-p/137489#M1394 aljohnson_splun 2015-02-13T22:27:39Z https://community.splunk.com/t5/Knowledge-Management/How-to-delete-data-from-the-data-model-and-force-it-to-rebuild/m-p/137490#M1395 <P>Thanks for your answer Aljohnson, In fact I was only disabling/enabling the DM and then rebuilding it but that wasn't helping. In order to force it to rebuild the acceleration period <STRONG>must be modified</STRONG> it seems or else the DM would simply keep the same data.</P> Mon, 16 Feb 2015 09:33:47 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-delete-data-from-the-data-model-and-force-it-to-rebuild/m-p/137490#M1395 DavidHourani 2015-02-16T09:33:47Z