Addon Builder CIM mapping

[tnordman]

Hi @all,

While mapping an eventtype to CIM, i get an error icon and I am not able to choose Email.
How can I fix that error, is there any log?

Best Regards,
Thomas

[david_rose]

Were you able to find a solution to this?

In my case, this always happens when accelerating datamodels. Disabled acceleration and removing the copy of your datamodel json under local in the splunk cim app folder fixes it.

[chli_splunk]

Seems like you installed Splunk_SA_CIM but customized some models by yourself. AoB needs some attributes to load data models in UI but any customizations will remove these attributes. Please refer the following doc to validate your data model JSON files manually.
http://docs.splunk.com/Documentation/AddonBuilder/2.2.0/UserGuide/DataModel

[lakshman239]

All the logs generated by add-on builder is available at /opt/splunk/var/log/splunk folder.

splunk_app_addon-builder_ta_builder.log
splunk_app_addon-builder_validation_engine.log
splunk_app_addon-builder_ta_builder_validation.log

You can search using index=_internal sourcetype="splunk:tabuilder:log"

have you checked the Splunk_SA_CIM is at a version compatible with the version of your add-on builder?