<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Datamodel Change in Reporting</title>
    <link>https://community.splunk.com/t5/Reporting/Datamodel-Change/m-p/290906#M5388</link>
    <description>&lt;P&gt;whats a good search to run to see if any change was done to a datamodel.  For example if I want to see if someone enable or disable datamodel acceleration.  what search can I run to see what user change the datamodel and which datamodel was changed?&lt;/P&gt;</description>
    <pubDate>Mon, 08 Jan 2018 17:25:52 GMT</pubDate>
    <dc:creator>mrtolu6</dc:creator>
    <dc:date>2018-01-08T17:25:52Z</dc:date>
    <item>
      <title>Datamodel Change</title>
      <link>https://community.splunk.com/t5/Reporting/Datamodel-Change/m-p/290906#M5388</link>
      <description>&lt;P&gt;whats a good search to run to see if any change was done to a datamodel.  For example if I want to see if someone enable or disable datamodel acceleration.  what search can I run to see what user change the datamodel and which datamodel was changed?&lt;/P&gt;</description>
      <pubDate>Mon, 08 Jan 2018 17:25:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/Datamodel-Change/m-p/290906#M5388</guid>
      <dc:creator>mrtolu6</dc:creator>
      <dc:date>2018-01-08T17:25:52Z</dc:date>
    </item>
    <item>
      <title>Re: Datamodel Change</title>
      <link>https://community.splunk.com/t5/Reporting/Datamodel-Change/m-p/290907#M5389</link>
      <description>&lt;P&gt;Try this &lt;/P&gt;

&lt;P&gt;&lt;CODE&gt;| rest /servicesNS/&amp;lt;user&amp;gt;/&amp;lt;app&amp;gt;/data/models&lt;/CODE&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 08 Jan 2018 17:33:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/Datamodel-Change/m-p/290907#M5389</guid>
      <dc:creator>skoelpin</dc:creator>
      <dc:date>2018-01-08T17:33:42Z</dc:date>
    </item>
    <item>
      <title>Re: Datamodel Change</title>
      <link>https://community.splunk.com/t5/Reporting/Datamodel-Change/m-p/290908#M5390</link>
      <description>&lt;P&gt;I tried that and got the following error "REST Processor: Failed to fetch REST endpoint uri=&lt;A href="https://127.0.0.1:8089/servicesNS///data/models?count=0"&gt;https://127.0.0.1:8089/servicesNS///data/models?count=0&lt;/A&gt; from server &lt;A href="https://127.0.0.1:8089"&gt;https://127.0.0.1:8089&lt;/A&gt;. Check that the URI path provided exists in the REST API."&lt;/P&gt;</description>
      <pubDate>Mon, 08 Jan 2018 18:16:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/Datamodel-Change/m-p/290908#M5390</guid>
      <dc:creator>mrtolu6</dc:creator>
      <dc:date>2018-01-08T18:16:09Z</dc:date>
    </item>
    <item>
      <title>Re: Datamodel Change</title>
      <link>https://community.splunk.com/t5/Reporting/Datamodel-Change/m-p/290909#M5391</link>
      <description>&lt;P&gt;Try this &lt;/P&gt;

&lt;P&gt;&lt;CODE&gt;| rest /services/data/models| transpose&lt;/CODE&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 08 Jan 2018 18:39:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/Datamodel-Change/m-p/290909#M5391</guid>
      <dc:creator>skoelpin</dc:creator>
      <dc:date>2018-01-08T18:39:57Z</dc:date>
    </item>
    <item>
      <title>Re: Datamodel Change</title>
      <link>https://community.splunk.com/t5/Reporting/Datamodel-Change/m-p/290910#M5392</link>
      <description>&lt;P&gt;thanks the search did work, but it didn't give me the info I'm looking for, Just looking to see who accelerated or disable data model acceleration.&lt;/P&gt;</description>
      <pubDate>Tue, 09 Jan 2018 20:32:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/Datamodel-Change/m-p/290910#M5392</guid>
      <dc:creator>mrtolu6</dc:creator>
      <dc:date>2018-01-09T20:32:12Z</dc:date>
    </item>
    <item>
      <title>Re: Datamodel Change</title>
      <link>https://community.splunk.com/t5/Reporting/Datamodel-Change/m-p/290911#M5393</link>
      <description>&lt;P&gt;If you look at the last row you can see the last updated time of the datamodel. As for who made the modification, you will probably have to do a subsearch against the internal audit index &lt;/P&gt;</description>
      <pubDate>Tue, 09 Jan 2018 20:42:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/Datamodel-Change/m-p/290911#M5393</guid>
      <dc:creator>skoelpin</dc:creator>
      <dc:date>2018-01-09T20:42:12Z</dc:date>
    </item>
  </channel>
</rss>

