Knowledge Management

Update schema of KV store collection

hughkelley
Path Finder

How do you add fields to a collection?

I created my collection via API and filled it with data. Then later on I added some fields to the JSON docs. I also tried POSTing a new field list into the configuration.

  • the collections.conf file still has the original field list,
  • the lookup (based on the KV) shows new data/fields I've added since then
  • the REST API view of the schema has no fields at all:

     name                               #text    
    ----                               -----    
    disabled                           0        
    eai:acl                                     
    eai:appName                        search   
    eai:userName                       nobody   
    profilingEnabled                   false    
    profilingThresholdMs               1000     
    replicate                          false    
    replication_dump_maximum_file_size 10240    
    replication_dump_strategy          auto     
    type                               undefined
    
Labels (1)
Tags (1)
0 Karma

to4kawa
Ultra Champion
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...