Getting Data In

Why splunk add-on builder is showing error( there is parsing error to this app) in Map to Data Model step?

ayushi_kaushik
New Member

when I am mapping my event types with data model and selecting data model corresponding my event types, it showing error-"there is parsing error to this app(Splunk_SA_CIM)?"

Data model mapping>>Select data model>>Splunk_SA_CIM[!]
This [!] is error stating - there is parsing error to this app.

Due to which I am unable to select or map to data model.
Can anyone help me?

Thanks in advance

Tags (4)
0 Karma

david_rose
Communicator

I am currently having this issue after I accelerate a datamodel. The only way to fix it (in my use case) is to disable acceleration and delete the copy of your datamodel under local.

0 Karma

chli_splunk
Splunk Employee
Splunk Employee

AoB needs some specific fields to parse the CIM. Please make sure your CIM is the latest version.
Also there is a known issue from CIM app - when you customized some data models thru CIM UI, some fields are removed automatically, which may cause same issue in AoB. So please remove everything in "local" folder and install latest CIM app. Thanks.

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...