Knowledge Management

In data model Is it possible to create a new dataset and then indent the existing datasets and its corresponding childs?

rolly_deguzman
New Member

I have an existing data model with a dataset (root event) and child. what I want is to indent this existing dataset to a new one. Making the existing dataset child of the new dataset that I'm going to create.

Is this possible?
Thanks!

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...