Reporting

Deleted datamodel does not disappear from datamodel

christopherwern
New Member

Hello experts,

I deleted a datamodel via splunk GUI but sadly it is still appearing in the list of datamodels.
Furthermore the GUI displays the following error:
Error in model "NamedModel" : JSON file contents not available.

I can not access the model any longer and if I delete it again via GUI, the data model gets removed from the list of models.
Unfortunately the datamodel is back in the list after a refresh of the datamodels page.

Any clue how I can solve that issue?

Kind regards and thanks in advance,
Christopher

0 Karma

andygerber
Path Finder

Look at your .conf files for where the data model is referenced, delete the reference in the file, do a debug refresh.

0 Karma

mayurr98
Super Champion

hey try deleting data model manually using CLI

http://docs.splunk.com/Documentation/Splunk/7.0.1/Knowledge/Managedatamodels#Delete_a_data_model

Also, try debug/refresh Or try restarting Splunk instance

Let me know if it helps!

0 Karma

christopherwern
New Member

hello,

thank you for your quick reply!
I am not able to restart the splunk instance because we are running a search head cluster.

0 Karma

mayurr98
Super Champion

You can do rolling restart on sh cluster using splunk rolling-restart shcluster-members

Pls refer this link for more:
https://docs.splunk.com/Documentation/Splunk/7.0.1/DistSearch/RestartSHC

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...