Splunk ITSI

Stpunk ITSI: Why I'm getting an error "Invalid data model specification" when I'm trying to add KPIs to a service?

Kirisame
New Member

Hello,
I'm adding some KPIs (Host OS, CPU load for instance), and when I'm trying to save service, I'm getting the following error message:

Service not saved. Details: Invalid datamodel specification in service "1" for kpi "generic test kpi". Datamodel info: {"owner_field": "Performance.CPU.cpu_load_percent", "object": "CPU", "datamodel": "Host_OS", "field": "cpu_load_percent"}

What's the problem with the datamodel? How can I fix it?

0 Karma

3lyaa_mo7sen
Loves-to-Learn Lots

has anyone managed to solve this issue ?

0 Karma

amartin6
Path Finder

Having the same issue, Kirisame were you able to resolve and save the KPI with the data model?

0 Karma

ansif
Motivator

Can you post screenshot of CPU utilization KPI creation.

0 Karma

Kirisame
New Member

KPI description

Search and Calculate

Source Data model: Host_OS -> CPU -> cpu_load_percent

Entities Entity Split by field: host

Calculation Calculating Average of Performance.CPU.cpu_load_percent per entity as entity value, Average of entity value as aggregate over the last 5 minute(s) every 5 minute(s)

Unit: %

Thresholding
Set Custom Thresholds
Enable Time Policies? No

Treat Gaps in Data as Unknown

Aggregate Thresholds

Aggregate Threshold Values
Base Severity Normal
View data from the last 60 minutes

Anomaly Detection
Analysis Time Window: Last 7 days

Trending Anomaly Detection
Enable Trending AD Algorithm: No
Algorithm Sensitivity: 8

Entity Cohesion Anomaly Detection
Enable Cohesive AD Algorithm: No
Algorithm Sensitivity: 8

0 Karma

ansif
Motivator

You named cpuload KPI as "generic test kpi"?

0 Karma

Kirisame
New Member

Yes, so was the name of the KPI, as you see, this error prevents me from creating it.

0 Karma

ansif
Motivator

Try some other names.

0 Karma

Kirisame
New Member

Tried already. The result is the same error.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...

Customer success is front and center at .conf25

Hi Splunkers, If you are not able to be at .conf25 in person, you can still learn about all the latest news ...