we would like to know if child objects have constraints AND attributes on their own
Each child object inherits the constraints of its parent object and includes a new constraint that ensures it represents a subset of the data covered by its parent object. https://docs.splunk.com/Splexicon:Constraint
Every child object in a data model contains attributes that it has inherited from its parent object. https://docs.splunk.com/Splexicon:Attribute
See this : http://docs.splunk.com/Documentation/Splunk/6.5.0/Knowledge/Aboutdatamodels#Datasets
Data models are composed of one or more datasets. Here are some basic facts about data model datasets:
....
...
- Child datasets have inheritance. Data model datasets are defined by characteristics that mostly break down into constraints and fields. Child datasets inherit constraints and fields from their parent datasets and have additional constraints and fields of their own.
- Child datasets provide a way of filtering events from parent datasets - Because a child dataset always provides an additional constraint on top of the constraints it has inherited from its parent dataset, the dataset it represents is always a subset of the dataset that its parent represents.
From that same #Datasets link above I think the following helps to clarify "attributes" as an analog to "fields".
Child datasets have inheritance. Data model datasets are defined by characteristics that mostly break down into constraints and fields. Child datasets inherit constraints and fields from their parent datasets and have additional constraints and fields of their own.
I think some context here may help. Could you provide a little more background?
I am learning splunk and wanted to know if child objects have constraints AND attributes on their own or if child objects have constraints on their own but attributes comes in from the parent