MonkeyK,
We have worked with the Splunk DataModel Team to optimize our datamodel the best we could. However, since every customers needs are different we have included fields in the datamodel that may not be important in your environment. The Splunk admin has the ability to remove fields that may not be of importance. This will help shrink the datamodel storage needs.
In an effort to continue to optimize our data model. Could you please provide feedback on which fields were removed and why? We would really appreciate it.
Regards,
Paul
... View more