Reporting

Deleted datamodel does not disappear from datamodel

christopherwern
New Member

Hello experts,

I deleted a datamodel via splunk GUI but sadly it is still appearing in the list of datamodels.
Furthermore the GUI displays the following error:
Error in model "NamedModel" : JSON file contents not available.

I can not access the model any longer and if I delete it again via GUI, the data model gets removed from the list of models.
Unfortunately the datamodel is back in the list after a refresh of the datamodels page.

Any clue how I can solve that issue?

Kind regards and thanks in advance,
Christopher

0 Karma

splunkettes
Path Finder

I recognize this is an old post but I ran into this issue today and this is how I solved it. In my case, there was another data model with the same name shared globally in another app (App B). I had to change the permissions of the global data model to shared in app (App B), then I could delete the other data model in App A. Once deleted, I changed the permissions for data model in App B back to global. Hope this helps!

0 Karma

andygerber
Path Finder

Look at your .conf files for where the data model is referenced, delete the reference in the file, do a debug refresh.

0 Karma

mayurr98
Super Champion

hey try deleting data model manually using CLI

http://docs.splunk.com/Documentation/Splunk/7.0.1/Knowledge/Managedatamodels#Delete_a_data_model

Also, try debug/refresh Or try restarting Splunk instance

Let me know if it helps!

0 Karma

christopherwern
New Member

hello,

thank you for your quick reply!
I am not able to restart the splunk instance because we are running a search head cluster.

0 Karma

mayurr98
Super Champion

You can do rolling restart on sh cluster using splunk rolling-restart shcluster-members

Pls refer this link for more:
https://docs.splunk.com/Documentation/Splunk/7.0.1/DistSearch/RestartSHC

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...