Knowledge Management

Issue related to data Model


I have created a data model from splunk UI and also added some eval fields to the data set.

After this, i tried creating some more eval fields in the data model in the datamodeltest.json file by manually adding the new fields in this file. But newly created fields from the backend, are not appearing in data model UI.

IS it mandatory to create eval fields for the data model from UI itself? Can't we create it through the json file?

Tags (1)
0 Karma


is there a way to import eval fields created in one data model to another data model?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...