Splunk Common Information Model 4.3.1 and Application State model - Are there missing fields, or errors in documentation?

[guilmxm]

Hi,

In 4.3.1 version of SA-CIM, The documentation for the data model "Application State" available at:

http://docs.splunk.com/Documentation/CIM/4.3.1/User/ApplicationState

Mentions for the subdomain "Processes" (process & report) the field:

• "process_id":

All_Application_State process_id string A numeric indicator (PID) for a process.

But it does not exist in the data model ifselt

• "process_name" exists in the data mode, but is not mentioned in the documentation table for that model

Am i missing something ?

Thanks

[rpille_splunk · Accepted solution]

Thanks, guilmxm -- the docs indeed do not match the data model. I'll get that fixed.

[guilmxm]

Great, you're welcome 😉