All Apps and Add-ons

Why is the CIM data model throwing error "Event coverage less than 90 % in CIM Validator"?

bagarwal
Path Finder

What is the meaning of "event coverage less than 90 %"? When the CIM data model tried to validate it threw this statement. How can I resolve it?

Refer the screenshot below:
alt text

0 Karma

jkat54
SplunkTrust
SplunkTrust

It means the field named "app" in this case is only found in 90% of your events. To "resolve" this, fix your data so that it has a field named "app" in 100% of the events.

Or just ignore it if 90% is fine with you.

0 Karma
Get Updates on the Splunk Community!

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...