Splunk Dev

Splunk CIM data models acceleration issue

eduardKiyko
Explorer

Hi all!
I am developing Splunk app right now and I observe some really weird stuff related to data models. Ive cloned Network_Resolution data model and I have 2 fully the same data models, but there is one issue: manually cloned data model easy accelerates and Splunks CIM data model doesn`t. The only difference - these data models belongs to different apps.
Maybe anyone have faced with similar issue before? If yes, how did you fix this?alt text

Tags (1)
0 Karma

skalliger
Motivator

I'm not sure about that, but this might be conflicting because you probably are trying to build the same index-based accelerations multiple times. There is no need to do so.

Why do you want to clone the exact data model? Simply share it.

Skalli

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...