Knowledge Management

Update schema of KV store collection

hughkelley
Path Finder

How do you add fields to a collection?

I created my collection via API and filled it with data. Then later on I added some fields to the JSON docs. I also tried POSTing a new field list into the configuration.

  • the collections.conf file still has the original field list,
  • the lookup (based on the KV) shows new data/fields I've added since then
  • the REST API view of the schema has no fields at all:

     name                               #text    
    ----                               -----    
    disabled                           0        
    eai:acl                                     
    eai:appName                        search   
    eai:userName                       nobody   
    profilingEnabled                   false    
    profilingThresholdMs               1000     
    replicate                          false    
    replication_dump_maximum_file_size 10240    
    replication_dump_strategy          auto     
    type                               undefined
    
Labels (1)
Tags (1)
0 Karma

to4kawa
Ultra Champion
0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...

Updated Data Management and AWS GDI Inventory in Splunk Observability

We’re making some changes to Data Management and Infrastructure Inventory for AWS. The Data Management page, ...