Splunk Enterprise Security

migration

SN1
Path Finder

Hello recently I moved ES app from one sh to another non clustered sh . after that this error is coming

Error in 'DataModelCache': Invalid or unaccelerable root object for datamodel 

Labels (1)
0 Karma

livehybrid
SplunkTrust
SplunkTrust
Hi @SN1 
Did you copy the Data model JSON files over from the old SH when migrating? (<yourapp>/local/data/models)
Is there any other context either side of the log you provided which might tell us which DataModel is having the issue?
Are you able to use, or even see the datamodel in the UI?
 

Please let me know how you get on and consider accepting this answer or adding karma this answer if it has helped.
Regards

Will

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...