Archive
Highlighted

Can child objects have constraints AND attributes on their own ?

Path Finder

we would like to know if child objects have constraints AND attributes on their own

Tags (1)
0 Karma
Highlighted

Re: Can child objects have constraints AND attributes on their own ?

SplunkTrust
SplunkTrust

I think some context here may help. Could you provide a little more background?

0 Karma
Highlighted

Re: Can child objects have constraints AND attributes on their own ?

Path Finder

I am learning splunk and wanted to know if child objects have constraints AND attributes on their own or if child objects have constraints on their own but attributes comes in from the parent

0 Karma
Highlighted

Re: Can child objects have constraints AND attributes on their own ?

SplunkTrust
SplunkTrust

See this : http://docs.splunk.com/Documentation/Splunk/6.5.0/Knowledge/Aboutdatamodels#Datasets

Data models are composed of one or more datasets. Here are some basic facts about data model datasets:
  ....
  ...
 - Child datasets have inheritance. Data model datasets are defined by characteristics that mostly break down into constraints and fields. Child datasets inherit constraints and fields from their parent datasets and have additional constraints and fields of their own.

-  Child datasets provide a way of filtering events from parent datasets - Because a child dataset always provides an additional constraint on top of the constraints it has inherited from its parent dataset, the dataset it represents is always a subset of the dataset that its parent represents.
0 Karma
Highlighted

Re: Can child objects have constraints AND attributes on their own ?

New Member

From that same #Datasets link above I think the following helps to clarify "attributes" as an analog to "fields".

Child datasets have inheritance. Data model datasets are defined by characteristics that mostly break down into constraints and fields. Child datasets inherit constraints and fields from their parent datasets and have additional constraints and fields of their own.

0 Karma
Highlighted

Re: Can child objects have constraints AND attributes on their own ?

Engager

Each child object inherits the constraints of its parent object and includes a new constraint that ensures it represents a subset of the data covered by its parent object. https://docs.splunk.com/Splexicon:Constraint

Every child object in a data model contains attributes that it has inherited from its parent object. https://docs.splunk.com/Splexicon:Attribute

Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.