Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Admin Other
- :
- Knowledge Management
- :
- Re: CIM datamodel error message
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Why I receive this error message in my splunk enviroment?
Splunk_SA_CIM version 4.11.0 is lower than required 4.9.1
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Seems like splunk does a simple string comparison on the version info which did work up to version 4.9.x but starting from version 4.10.x splunk complains about it, as 4.1x is lower than 4.9.
As far as I know there is nothing you can do about it other than open a ticket or ignore the message and know that 4.11 is actually a higher version than 4.9.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This has been fixed in ES 4.7.6
It's not an issue with the underlying Splunk version
https://docs.splunk.com/Documentation/ES/4.7.6/RN/FixedIssues
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Clearly that is a bug. Generate a diag on your Search Head and open a ticket with Splunk and let them fix it. Clearly you can ignore it.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Seems like splunk does a simple string comparison on the version info which did work up to version 4.9.x but starting from version 4.10.x splunk complains about it, as 4.1x is lower than 4.9.
As far as I know there is nothing you can do about it other than open a ticket or ignore the message and know that 4.11 is actually a higher version than 4.9.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Which version of Splunk you are using?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
the Splunk version is 7.0.3
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Make Your Machine Data AI-Ready in Splunk
Splunk Asynchronous Forwarding Explained
How to Monitor AI Agents with Splunk Agent Observability
