Hello experts,
I deleted a datamodel via splunk GUI but sadly it is still appearing in the list of datamodels.
Furthermore the GUI displays the following error:
Error in model "NamedModel" : JSON file contents not available.
I can not access the model any longer and if I delete it again via GUI, the data model gets removed from the list of models.
Unfortunately the datamodel is back in the list after a refresh of the datamodels page.
Any clue how I can solve that issue?
Kind regards and thanks in advance,
Christopher
I recognize this is an old post but I ran into this issue today and this is how I solved it. In my case, there was another data model with the same name shared globally in another app (App B). I had to change the permissions of the global data model to shared in app (App B), then I could delete the other data model in App A. Once deleted, I changed the permissions for data model in App B back to global. Hope this helps!
Look at your .conf files for where the data model is referenced, delete the reference in the file, do a debug refresh.
hey try deleting data model manually using CLI
http://docs.splunk.com/Documentation/Splunk/7.0.1/Knowledge/Managedatamodels#Delete_a_data_model
Also, try debug/refresh Or try restarting Splunk instance
Let me know if it helps!
hello,
thank you for your quick reply!
I am not able to restart the splunk instance because we are running a search head cluster.
You can do rolling restart on sh cluster using splunk rolling-restart shcluster-members
Pls refer this link for more:
https://docs.splunk.com/Documentation/Splunk/7.0.1/DistSearch/RestartSHC