All Apps and Add-ons

Why is the CIM data model throwing error "Event coverage less than 90 % in CIM Validator"?

bagarwal
Path Finder

What is the meaning of "event coverage less than 90 %"? When the CIM data model tried to validate it threw this statement. How can I resolve it?

Refer the screenshot below:
alt text

0 Karma

jkat54
SplunkTrust
SplunkTrust

It means the field named "app" in this case is only found in 90% of your events. To "resolve" this, fix your data so that it has a field named "app" in 100% of the events.

Or just ignore it if 90% is fine with you.

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...