- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

gcusello

SplunkTrust
10-26-2021
02:57 AM
Hi at all,
my customer has the requirement to have the "index" field in each DataModel used in ES.
Obviously, this additional field doesn't modify CIM compliance but it's needed to make an additional filter to data.
But the question is: at the next upgrade of ES, the customization will be maintained or not?
Bye.
Giuseppe
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
10-26-2021
05:42 AM
Customizations to datamodels are stored in $SPLUNK_HOME/etc/apps/Splunk_SA_CIM/local/datamodels.conf. Any updates to ES or CIM will not affect the custom DM.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
10-26-2021
05:42 AM
Customizations to datamodels are stored in $SPLUNK_HOME/etc/apps/Splunk_SA_CIM/local/datamodels.conf. Any updates to ES or CIM will not affect the custom DM.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
