All Apps and Add-ons

Why is the CIM data model throwing error "Event coverage less than 90 % in CIM Validator"?

bagarwal
Path Finder

What is the meaning of "event coverage less than 90 %"? When the CIM data model tried to validate it threw this statement. How can I resolve it?

Refer the screenshot below:
alt text

0 Karma

jkat54
SplunkTrust
SplunkTrust

It means the field named "app" in this case is only found in 90% of your events. To "resolve" this, fix your data so that it has a field named "app" in 100% of the events.

Or just ignore it if 90% is fine with you.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...