https://community.splunk.com/t5/Knowledge-Management/Multiple-definitions-for-one-tag/m-p/20536#M161 <P>well the tags could conceivablely be the same but they could apply to different sources/sourcetypes or applications. So even if they have the same owner they could do different things.</P> <P>when running a search it would depends on which one of these tags applies to the search.</P> Fri, 09 Dec 2011 16:58:01 GMT Kate_Lawrence-G 2011-12-09T16:58:01Z https://community.splunk.com/t5/Knowledge-Management/Multiple-definitions-for-one-tag/m-p/20535#M160 <P>I am somewhat new to tags as a "Knowledge Management" tool, and I am reviewing the tags configured on my SPLUNK search head, and totally confused by the following situation... From the GUI, I go to Manage -&gt; Tags -&gt; List by tag name. I see a particular tag (let's call it tag1) that is listed twice, with different field-value pairs. In one row, it includes two field-value pairs, and in the other it includes about 60 field-value pairs. In both definitions, the owner and the app are the same (admin, search). Is this viable? If so, if I were logged in as admin, and I used this tag in a search, which set of field-value pairs would it use?</P> <P>Thanx for any clarification...</P> Tue, 22 Nov 2011 05:20:01 GMT https://community.splunk.com/t5/Knowledge-Management/Multiple-definitions-for-one-tag/m-p/20535#M160 mfeeny1 2011-11-22T05:20:01Z https://community.splunk.com/t5/Knowledge-Management/Multiple-definitions-for-one-tag/m-p/20536#M161 <P>well the tags could conceivablely be the same but they could apply to different sources/sourcetypes or applications. So even if they have the same owner they could do different things.</P> <P>when running a search it would depends on which one of these tags applies to the search.</P> Fri, 09 Dec 2011 16:58:01 GMT https://community.splunk.com/t5/Knowledge-Management/Multiple-definitions-for-one-tag/m-p/20536#M161 Kate_Lawrence-G 2011-12-09T16:58:01Z