Splunk ITSI

Stpunk ITSI: Why I'm getting an error "Invalid data model specification" when I'm trying to add KPIs to a service?

Kirisame
New Member

Hello,
I'm adding some KPIs (Host OS, CPU load for instance), and when I'm trying to save service, I'm getting the following error message:

Service not saved. Details: Invalid datamodel specification in service "1" for kpi "generic test kpi". Datamodel info: {"owner_field": "Performance.CPU.cpu_load_percent", "object": "CPU", "datamodel": "Host_OS", "field": "cpu_load_percent"}

What's the problem with the datamodel? How can I fix it?

0 Karma

3lyaa_mo7sen
Loves-to-Learn Lots

has anyone managed to solve this issue ?

0 Karma

amartin6
Path Finder

Having the same issue, Kirisame were you able to resolve and save the KPI with the data model?

0 Karma

ansif
Motivator

Can you post screenshot of CPU utilization KPI creation.

0 Karma

Kirisame
New Member

KPI description

Search and Calculate

Source Data model: Host_OS -> CPU -> cpu_load_percent

Entities Entity Split by field: host

Calculation Calculating Average of Performance.CPU.cpu_load_percent per entity as entity value, Average of entity value as aggregate over the last 5 minute(s) every 5 minute(s)

Unit: %

Thresholding
Set Custom Thresholds
Enable Time Policies? No

Treat Gaps in Data as Unknown

Aggregate Thresholds

Aggregate Threshold Values
Base Severity Normal
View data from the last 60 minutes

Anomaly Detection
Analysis Time Window: Last 7 days

Trending Anomaly Detection
Enable Trending AD Algorithm: No
Algorithm Sensitivity: 8

Entity Cohesion Anomaly Detection
Enable Cohesive AD Algorithm: No
Algorithm Sensitivity: 8

0 Karma

ansif
Motivator

You named cpuload KPI as "generic test kpi"?

0 Karma

Kirisame
New Member

Yes, so was the name of the KPI, as you see, this error prevents me from creating it.

0 Karma

ansif
Motivator

Try some other names.

0 Karma

Kirisame
New Member

Tried already. The result is the same error.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...