Deployment Architecture

Can child objects have constraints AND attributes on their own ?

aparnaa
Path Finder

we would like to know if child objects have constraints AND attributes on their own

Tags (1)
0 Karma

nrunte
Engager

Each child object inherits the constraints of its parent object and includes a new constraint that ensures it represents a subset of the data covered by its parent object. https://docs.splunk.com/Splexicon:Constraint

Every child object in a data model contains attributes that it has inherited from its parent object. https://docs.splunk.com/Splexicon:Attribute

somesoni2
SplunkTrust
SplunkTrust

See this : http://docs.splunk.com/Documentation/Splunk/6.5.0/Knowledge/Aboutdatamodels#Datasets

Data models are composed of one or more datasets. Here are some basic facts about data model datasets:
  ....
  ...
 - Child datasets have inheritance. Data model datasets are defined by characteristics that mostly break down into constraints and fields. Child datasets inherit constraints and fields from their parent datasets and have additional constraints and fields of their own.

-  Child datasets provide a way of filtering events from parent datasets - Because a child dataset always provides an additional constraint on top of the constraints it has inherited from its parent dataset, the dataset it represents is always a subset of the dataset that its parent represents.
0 Karma

dthompson_splun
Splunk Employee
Splunk Employee

From that same #Datasets link above I think the following helps to clarify "attributes" as an analog to "fields".

Child datasets have inheritance. Data model datasets are defined by characteristics that mostly break down into constraints and fields. Child datasets inherit constraints and fields from their parent datasets and have additional constraints and fields of their own.

0 Karma

Richfez
SplunkTrust
SplunkTrust

I think some context here may help. Could you provide a little more background?

0 Karma

aparnaa
Path Finder

I am learning splunk and wanted to know if child objects have constraints AND attributes on their own or if child objects have constraints on their own but attributes comes in from the parent

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...