Knowledge Management

alert in datamodel

vumanhtai
Path Finder

Hi Splunk Team
I see this message on my entire datamodel, how can I fix it?
"This object has no explicit index constraint. Consider adding one for better performance."
How can fix it
Thanks

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Edit the data model and add "index=foo" (change "foo" to the index that contains data relevant to the DM) to the first constraint.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Edit the data model and add "index=foo" (change "foo" to the index that contains data relevant to the DM) to the first constraint.

---
If this reply helps you, Karma would be appreciated.

vumanhtai
Path Finder

thank you

0 Karma
Get Updates on the Splunk Community!

What’s New in Splunk Enterprise 9.4: Tools for Digital Resilience

What’s New in Splunk Enterprise 9.4: Tools for Digital ResilienceTune in to What’s New in Splunk Enterprise ...

Get Schooled with Splunk Education: Explore Our Latest Courses

At Splunk Education, we’re dedicated to providing incredible learning experiences that cater to every skill ...

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL  The Splunk AI Assistant for SPL ...