Hi Team ,
We have Splunk App for PCI Compliance - Splunk Enterprise running in our environment with the search head. We have verified the services are up and running,
I can see error in splunkd.log .
"ERROR DataModelEvaluator - Data model 'Security_DSB' was not found." .
The URL is completely down , Kindly help in this .
We have troubleshooted by restarting the splunkd services on that particular PCI server but it doesn't work.
Thanks in advance
If Splunk won't start (BTW, you need to start it by running splunk - not just splunkd)
and the splunkd.log doesn't help, you should open a ticket with Splunk Support.
Splunk PCI is a supported app and hopefully you also have a support contract.
View solution in original post