https://community.splunk.com/t5/Splunk-Enterprise-Security/Why-are-the-Data-Models-not-building/m-p/290397#M2532 <P>I have recently rebuilt our server that hosts the Enterprise Security app here and I am having trouble with some of the Data Models not building. I have tried stop and restarting the acceleration of the models and they all still get stuck at building. Does anyone have any ideas why this may be?</P> Sun, 07 Jun 2020 16:30:23 GMT mcxrisley08 2020-06-07T16:30:23Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Why-are-the-Data-Models-not-building/m-p/290397#M2532 <P>I have recently rebuilt our server that hosts the Enterprise Security app here and I am having trouble with some of the Data Models not building. I have tried stop and restarting the acceleration of the models and they all still get stuck at building. Does anyone have any ideas why this may be?</P> Sun, 07 Jun 2020 16:30:23 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Why-are-the-Data-Models-not-building/m-p/290397#M2532 mcxrisley08 2020-06-07T16:30:23Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Why-are-the-Data-Models-not-building/m-p/290398#M2533 <P>UPDATE: I still have not fixed this issue but have noticed that whenever I run a search for the tags associated with the data models that are not building, I get 0 results. So I created one of the tags to see if this would fix this issue. The search found the events but matched 0 of 1,879,456 events. Maybe the tags not existing or being able to find the data could be associated with the data models not building?</P> Tue, 27 Mar 2018 13:15:25 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Why-are-the-Data-Models-not-building/m-p/290398#M2533 mcxrisley08 2018-03-27T13:15:25Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Why-are-the-Data-Models-not-building/m-p/290399#M2534 <P>UPDATE: I finally fixed the issue with my data models. After doing some troubleshooting I determined that the data was not normalizing, so I downloaded some add-ons and the data models started building and were searchable within a few minutes.</P> Thu, 29 Mar 2018 13:45:05 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Why-are-the-Data-Models-not-building/m-p/290399#M2534 mcxrisley08 2018-03-29T13:45:05Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Why-are-the-Data-Models-not-building/m-p/290400#M2535 <P>@mcxrisley08 If your problem is resolved, please accept the answer to help future readers.</P> Thu, 29 Mar 2018 14:51:18 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Why-are-the-Data-Models-not-building/m-p/290400#M2535 richgalloway 2018-03-29T14:51:18Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Why-are-the-Data-Models-not-building/m-p/290401#M2536 <P>What add-ons did you specifically download? I am experiencing the same thing so additional context as to what/why this is occurring and what you downloaded to fix the issue would be helpful.</P> Tue, 05 May 2020 20:02:53 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Why-are-the-Data-Models-not-building/m-p/290401#M2536 mxg142 2020-05-05T20:02:53Z