Splunk IT Service Intelligence

Stpunk ITSI: Why I'm getting an error "Invalid data model specification" when I'm trying to add KPIs to a service?

Kirisame
New Member

Hello,
I'm adding some KPIs (Host OS, CPU load for instance), and when I'm trying to save service, I'm getting the following error message:

Service not saved. Details: Invalid datamodel specification in service "1" for kpi "generic test kpi". Datamodel info: {"owner_field": "Performance.CPU.cpu_load_percent", "object": "CPU", "datamodel": "Host_OS", "field": "cpu_load_percent"}

What's the problem with the datamodel? How can I fix it?

0 Karma

3lyaa_mo7sen
Loves-to-Learn Lots

has anyone managed to solve this issue ?

0 Karma

amartin6
Path Finder

Having the same issue, Kirisame were you able to resolve and save the KPI with the data model?

0 Karma

ansif
Motivator

Can you post screenshot of CPU utilization KPI creation.

0 Karma

Kirisame
New Member

KPI description

Search and Calculate

Source Data model: Host_OS -> CPU -> cpu_load_percent

Entities Entity Split by field: host

Calculation Calculating Average of Performance.CPU.cpu_load_percent per entity as entity value, Average of entity value as aggregate over the last 5 minute(s) every 5 minute(s)

Unit: %

Thresholding
Set Custom Thresholds
Enable Time Policies? No

Treat Gaps in Data as Unknown

Aggregate Thresholds

Aggregate Threshold Values
Base Severity Normal
View data from the last 60 minutes

Anomaly Detection
Analysis Time Window: Last 7 days

Trending Anomaly Detection
Enable Trending AD Algorithm: No
Algorithm Sensitivity: 8

Entity Cohesion Anomaly Detection
Enable Cohesive AD Algorithm: No
Algorithm Sensitivity: 8

0 Karma

ansif
Motivator

You named cpuload KPI as "generic test kpi"?

0 Karma

Kirisame
New Member

Yes, so was the name of the KPI, as you see, this error prevents me from creating it.

0 Karma

ansif
Motivator

Try some other names.

0 Karma

Kirisame
New Member

Tried already. The result is the same error.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...