Anomali ThreatStream Community App: What does "Error in TsidxStats": Could not find datamodel: TS_optic" mean and how do I fix it?

[pmchao]

I am new to the Splunk world, but I was trying to use Anomali ThreatStream Community App and a search but get the following errors:
(1) Error in "TsidxStats": Could not find datamodel: TS_Optic
(2) The search job has failed due to an error. You may be able view job in the "Job Inspector"

My question is: what is "datamodel : TS_Optic"? How do I create one?

[himynamesdave]

Hey @pmchao -

I work @ Anomali and can help you fix this ASAP.

We've just released a new version of the app with some fixes. Although this was not a known issue can you configure the new app on your Splunk instance and report if this issue persists?

Hopefully it will be resolved, if not, please can you reply the steps you went through to configure the app (including any data you're using -- sources, sourcetypes, etc) so we can begin to troubleshoot?

-dave

[martin_mueller]

Is this different from https://answers.splunk.com/answers/477687/how-to-do-basic-search-splunk-anomali.html?