CIM datamodel error message

[asabatini85]

Why I receive this error message in my splunk enviroment?

Splunk_SA_CIM version 4.11.0 is lower than required 4.9.1

[andygerber]

This has been fixed in ES 4.7.6
It's not an issue with the underlying Splunk version

https://docs.splunk.com/Documentation/ES/4.7.6/RN/FixedIssues

[woodcock]

Clearly that is a bug. Generate a diag on your Search Head and open a ticket with Splunk and let them fix it. Clearly you can ignore it.

[flyingk · Accepted solution]

Seems like splunk does a simple string comparison on the version info which did work up to version 4.9.x but starting from version 4.10.x splunk complains about it, as 4.1x is lower than 4.9.

As far as I know there is nothing you can do about it other than open a ticket or ignore the message and know that 4.11 is actually a higher version than 4.9.

[ansif]

Which version of Splunk you are using?

[asabatini85]

the Splunk version is 7.0.3