https://community.splunk.com/t5/Splunk-Search/Why-is-there-Circular-dependency-Issue-in-Data-Model/m-p/589490#M205276 <P>Tyr to use tstats and not "from datamodel" , also the&nbsp; "<SPAN>Circular dependency Issue</SPAN>" could happened if it encounters missing tsidx data.<BR /><BR />try using tstats with summariesonly=false</P><P>&nbsp;</P> Thu, 17 Mar 2022 10:28:02 GMT jordan 2022-03-17T10:28:02Z https://community.splunk.com/t5/Splunk-Search/Why-is-there-Circular-dependency-Issue-in-Data-Model/m-p/391405#M113961 <P>Error: <CODE>Error in 'SearchProcessor': Found circular dependency when expanding from.Network_Traffic.All_Traffic</CODE></P> <P>Background: core is an index containing <CODE>{ipAddress, score}</CODE>.</P> <P>When creating a data model with the following query: <BR />`| union<BR />[| from datamodel:"Network_Traffic.All_Traffic" | join type=left src_ip [search source=core | rename ipAddress AS src_ip] | rename src_ip as ip | stats latest(score) by ip | where score!="" and score!="null"]</P> <PRE><CODE>[| from datamodel:"Network_Traffic.All_Traffic" | join type=left dest_ip [search source=core | rename ipAddress AS dest_ip] | rename dest_ip as ip | stats latest(score) by ip | where score!="" and score!="null"]` </CODE></PRE> <P>I'm trying to lookup all <CODE>ipAddress</CODE> from the <CODE>NetworkTraffic</CODE> datamodel and map it with <CODE>score</CODE> from the <CODE>core</CODE> index.</P> Fri, 18 Mar 2022 04:58:33 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-there-Circular-dependency-Issue-in-Data-Model/m-p/391405#M113961 kashz 2022-03-18T04:58:33Z https://community.splunk.com/t5/Splunk-Search/Why-is-there-Circular-dependency-Issue-in-Data-Model/m-p/589490#M205276 <P>Tyr to use tstats and not "from datamodel" , also the&nbsp; "<SPAN>Circular dependency Issue</SPAN>" could happened if it encounters missing tsidx data.<BR /><BR />try using tstats with summariesonly=false</P><P>&nbsp;</P> Thu, 17 Mar 2022 10:28:02 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-there-Circular-dependency-Issue-in-Data-Model/m-p/589490#M205276 jordan 2022-03-17T10:28:02Z