Reporting

What's the purpose of the default.meta application context datamodel version number?

nclancy_splunk
Splunk Employee
Splunk Employee

For a statistical solution with Splunk we make use of multiple datamodels which have different Splunk version numbers connected though the *.meta files.

Documentation is not clear on what the exact purpose of this version number is.

\Splunk\common\metadata\default.meta app contents:

Field datamodels statistical and user_upload:
version = 6.5.0
Field datamodel internal_statistics:

version = 6.6.3

Questions:
- Why is this field not updated to 6.6.3 with Splunk upgrade?
- Are the data models with version 6.6.3 still working for Splunk 6.5.0 still working?

0 Karma
1 Solution

nclancy_splunk
Splunk Employee
Splunk Employee

My take on the versioning is that it reflects the splunk version when the folder is initially created. This remains unchanged after upgrading.

You would like to know if this version is used in any way in splunk as you need to know if it needs to be added to your regression testing as a significant factor when you upgrade your Splunk enterprise.

The local.meta is used in two major senses

  1. It is used in migration to help the process determine if items need to be changed to remain compatible with new version

or

  1. It is used to dynamically handle backwards compatibility so that a new version can work with older formats.

So if any check is to be made for these local.meta files in your regression suite it is that under no circumstances are these files edited manually.

View solution in original post

0 Karma

nclancy_splunk
Splunk Employee
Splunk Employee

My take on the versioning is that it reflects the splunk version when the folder is initially created. This remains unchanged after upgrading.

You would like to know if this version is used in any way in splunk as you need to know if it needs to be added to your regression testing as a significant factor when you upgrade your Splunk enterprise.

The local.meta is used in two major senses

  1. It is used in migration to help the process determine if items need to be changed to remain compatible with new version

or

  1. It is used to dynamically handle backwards compatibility so that a new version can work with older formats.

So if any check is to be made for these local.meta files in your regression suite it is that under no circumstances are these files edited manually.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...