Deployment Architecture

Can child objects have constraints AND attributes on their own ?

aparnaa
Path Finder

we would like to know if child objects have constraints AND attributes on their own

Tags (1)
0 Karma

nrunte
Engager

Each child object inherits the constraints of its parent object and includes a new constraint that ensures it represents a subset of the data covered by its parent object. https://docs.splunk.com/Splexicon:Constraint

Every child object in a data model contains attributes that it has inherited from its parent object. https://docs.splunk.com/Splexicon:Attribute

somesoni2
SplunkTrust
SplunkTrust

See this : http://docs.splunk.com/Documentation/Splunk/6.5.0/Knowledge/Aboutdatamodels#Datasets

Data models are composed of one or more datasets. Here are some basic facts about data model datasets:
  ....
  ...
 - Child datasets have inheritance. Data model datasets are defined by characteristics that mostly break down into constraints and fields. Child datasets inherit constraints and fields from their parent datasets and have additional constraints and fields of their own.

-  Child datasets provide a way of filtering events from parent datasets - Because a child dataset always provides an additional constraint on top of the constraints it has inherited from its parent dataset, the dataset it represents is always a subset of the dataset that its parent represents.
0 Karma

dthompson_splun
Splunk Employee
Splunk Employee

From that same #Datasets link above I think the following helps to clarify "attributes" as an analog to "fields".

Child datasets have inheritance. Data model datasets are defined by characteristics that mostly break down into constraints and fields. Child datasets inherit constraints and fields from their parent datasets and have additional constraints and fields of their own.

0 Karma

Richfez
SplunkTrust
SplunkTrust

I think some context here may help. Could you provide a little more background?

0 Karma

aparnaa
Path Finder

I am learning splunk and wanted to know if child objects have constraints AND attributes on their own or if child objects have constraints on their own but attributes comes in from the parent

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...