Why is the CIM data model throwing error "Event co...

bagarwal · ‎06-21-2016

What is the meaning of "event coverage less than 90 %"? When the CIM data model tried to validate it threw this statement. How can I resolve it?

Refer the screenshot below:

jkat54 · ‎06-21-2016

It means the field named "app" in this case is only found in 90% of your events. To "resolve" this, fix your data so that it has a field named "app" in 100% of the events.

Or just ignore it if 90% is fine with you.

Why is the CIM data model throwing error "Event coverage less than 90 % in CIM Validator"?

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Are you a member of the Splunk Community?

Why is the CIM data model throwing error "Event coverage less than 90 % in CIM Validator"?

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever