Knowledge Management

CIM datamodel error message

asabatini85
Path Finder

Why I receive this error message in my splunk enviroment?

Splunk_SA_CIM version 4.11.0 is lower than required 4.9.1

Tags (1)
1 Solution

flyingk
Engager

Seems like splunk does a simple string comparison on the version info which did work up to version 4.9.x but starting from version 4.10.x splunk complains about it, as 4.1x is lower than 4.9.

As far as I know there is nothing you can do about it other than open a ticket or ignore the message and know that 4.11 is actually a higher version than 4.9.

View solution in original post

0 Karma

andygerber
Path Finder

This has been fixed in ES 4.7.6
It's not an issue with the underlying Splunk version

https://docs.splunk.com/Documentation/ES/4.7.6/RN/FixedIssues

0 Karma

woodcock
Esteemed Legend

Clearly that is a bug. Generate a diag on your Search Head and open a ticket with Splunk and let them fix it. Clearly you can ignore it.

0 Karma

flyingk
Engager

Seems like splunk does a simple string comparison on the version info which did work up to version 4.9.x but starting from version 4.10.x splunk complains about it, as 4.1x is lower than 4.9.

As far as I know there is nothing you can do about it other than open a ticket or ignore the message and know that 4.11 is actually a higher version than 4.9.

0 Karma

ansif
Motivator

Which version of Splunk you are using?

0 Karma

asabatini85
Path Finder

the Splunk version is 7.0.3

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...