Hello experts,
I deleted a datamodel via splunk GUI but sadly it is still appearing in the list of datamodels.
Furthermore the GUI displays the following error:
Error in model "NamedModel" : JSON file contents not available.
I can not access the model any longer and if I delete it again via GUI, the data model gets removed from the list of models.
Unfortunately the datamodel is back in the list after a refresh of the datamodels page.
Any clue how I can solve that issue?
Kind regards and thanks in advance,
Christopher
Look at your .conf files for where the data model is referenced, delete the reference in the file, do a debug refresh.
hey try deleting data model manually using CLI
http://docs.splunk.com/Documentation/Splunk/7.0.1/Knowledge/Managedatamodels#Delete_a_data_model
Also, try debug/refresh
Or try restarting Splunk instance
Let me know if it helps!
hello,
thank you for your quick reply!
I am not able to restart the splunk instance because we are running a search head cluster.
You can do rolling restart on sh cluster using splunk rolling-restart shcluster-members
Pls refer this link for more:
https://docs.splunk.com/Documentation/Splunk/7.0.1/DistSearch/RestartSHC