Why is SA-cim_Vladiator stuck on one datamodel?

[adamscaa1]

Downloaded SA-cim_Vladiator app on my splunk enterprise , however it's stuck on search type= _raw and Target Datamodel= "Network_Traffic" which is grayed out and I can't select any different datamodels.

Could anyone provide any info to help me get this working correctly.

Thanks all

[gcusello]

Hi @adamscaa1,

did you installed the CIM App (https://splunkbase.splunk.com/app/1621) in your Splunk?

Ciao.

Giuseppe

[adamscaa1]

Hello Giuseppe, 

Yes, I have been using the CIM app for some time now. I am at version 5.1.1.

[gcusello]

Hi @adamscaa1,

I have the CIM Validator 1.8.2 and Common Information Model 5.1.1 and I haven't your issue.

Are you using Linux or Windows?

Which user are you using, an administrator?

Ciao.

Giuseppe