Reporting

Datamodel does not disappear from datamodel panel from Splunk UI

Inayath_khan
Path Finder

Hi

I have created a datamodels.conf by mistakely under the search app for the accelaration but the actual datamodel and associated jsons was exists under Splunk_SA_CIM, So i deleted the datamodels.conf from the search app and restarted the entire cluster and also i have performed debug/refresh. But still the it throws an error of JSON missing.

Any idea on this??

0 Karma

nareshinsvu
Builder

Do you have a deployer for your Search Head cluster?
Did you deploy the conf file through the deployer and deleted through the deployer? If not do it.
What errors are you seeing in splunkd.log?

0 Karma

Inayath_khan
Path Finder

Ya i do have a deployer for my SH-Cluster and i have deleted datamodels.conf in deployer but still it says json not found.

0 Karma

nareshinsvu
Builder

What is the root cause and resolution?

0 Karma

Inayath_khan
Path Finder

Iam still checking. Let me know your inputs.

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...