datamodel showing unknown with stats or tstats for dest field

[Chiranjeev]

HI ,

I have a Web data model where i recently got it mapped with the dest field.the issue is that event hough every filed has a dest in the index from where i am pulling data in datamodel i still see alot of fields with value unknown for dest  while running stats or tstats command .I can see the the dest field when i specifically search it within a datamodel with a src ip . can anyone help to tell how do i rectify that .

Thanks.

[Gr0und_Z3r0]

hi @Chiranjeev 

The default configuration in web datamodel for dest field is evaluated.

if(isnull(dest) OR dest="" OR dest="-","unknown",dest)

So you'll need to either update this eval statement in the data model to fit your case or map correct field for dest field.

If the reply helps, a Karma vote would be appreciated.