Hi
I have created a datamodels.conf by mistakely under the search app for the accelaration but the actual datamodel and associated jsons was exists under Splunk_SA_CIM, So i deleted the datamodels.conf from the search app and restarted the entire cluster and also i have performed debug/refresh. But still the it throws an error of JSON missing.
Any idea on this??
Do you have a deployer for your Search Head cluster?
Did you deploy the conf file through the deployer and deleted through the deployer? If not do it.
What errors are you seeing in splunkd.log?
Ya i do have a deployer for my SH-Cluster and i have deleted datamodels.conf in deployer but still it says json not found.
What is the root cause and resolution?
Iam still checking. Let me know your inputs.