Knowledge Management

alert in datamodel

vumanhtai
Path Finder

Hi Splunk Team
I see this message on my entire datamodel, how can I fix it?
"This object has no explicit index constraint. Consider adding one for better performance."
How can fix it
Thanks

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Edit the data model and add "index=foo" (change "foo" to the index that contains data relevant to the DM) to the first constraint.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Edit the data model and add "index=foo" (change "foo" to the index that contains data relevant to the DM) to the first constraint.

---
If this reply helps you, Karma would be appreciated.

vumanhtai
Path Finder

thank you

0 Karma
Get Updates on the Splunk Community!

Data Preparation Made Easy: SPL2 for Edge Processor

By now, you may have heard the exciting news that Edge Processor, the easy-to-use Splunk data preparation tool ...

Introducing Edge Processor: Next Gen Data Transformation

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...

Tips & Tricks When Using Ingest Actions

Tune in to learn about:Large scale architecture when using Ingest ActionsRegEx performance considerations ...