Reporting

What's the purpose of the default.meta application context datamodel version number?

nclancy_splunk
Splunk Employee
Splunk Employee

For a statistical solution with Splunk we make use of multiple datamodels which have different Splunk version numbers connected though the *.meta files.

Documentation is not clear on what the exact purpose of this version number is.

\Splunk\common\metadata\default.meta app contents:

Field datamodels statistical and user_upload:
version = 6.5.0
Field datamodel internal_statistics:

version = 6.6.3

Questions:
- Why is this field not updated to 6.6.3 with Splunk upgrade?
- Are the data models with version 6.6.3 still working for Splunk 6.5.0 still working?

0 Karma
1 Solution

nclancy_splunk
Splunk Employee
Splunk Employee

My take on the versioning is that it reflects the splunk version when the folder is initially created. This remains unchanged after upgrading.

You would like to know if this version is used in any way in splunk as you need to know if it needs to be added to your regression testing as a significant factor when you upgrade your Splunk enterprise.

The local.meta is used in two major senses

  1. It is used in migration to help the process determine if items need to be changed to remain compatible with new version

or

  1. It is used to dynamically handle backwards compatibility so that a new version can work with older formats.

So if any check is to be made for these local.meta files in your regression suite it is that under no circumstances are these files edited manually.

View solution in original post

0 Karma

nclancy_splunk
Splunk Employee
Splunk Employee

My take on the versioning is that it reflects the splunk version when the folder is initially created. This remains unchanged after upgrading.

You would like to know if this version is used in any way in splunk as you need to know if it needs to be added to your regression testing as a significant factor when you upgrade your Splunk enterprise.

The local.meta is used in two major senses

  1. It is used in migration to help the process determine if items need to be changed to remain compatible with new version

or

  1. It is used to dynamically handle backwards compatibility so that a new version can work with older formats.

So if any check is to be made for these local.meta files in your regression suite it is that under no circumstances are these files edited manually.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...