Deployment Architecture

Can child objects have constraints AND attributes on their own ?

aparnaa
Path Finder

we would like to know if child objects have constraints AND attributes on their own

Tags (1)
0 Karma

nrunte
Engager

Each child object inherits the constraints of its parent object and includes a new constraint that ensures it represents a subset of the data covered by its parent object. https://docs.splunk.com/Splexicon:Constraint

Every child object in a data model contains attributes that it has inherited from its parent object. https://docs.splunk.com/Splexicon:Attribute

somesoni2
Revered Legend

See this : http://docs.splunk.com/Documentation/Splunk/6.5.0/Knowledge/Aboutdatamodels#Datasets

Data models are composed of one or more datasets. Here are some basic facts about data model datasets:
  ....
  ...
 - Child datasets have inheritance. Data model datasets are defined by characteristics that mostly break down into constraints and fields. Child datasets inherit constraints and fields from their parent datasets and have additional constraints and fields of their own.

-  Child datasets provide a way of filtering events from parent datasets - Because a child dataset always provides an additional constraint on top of the constraints it has inherited from its parent dataset, the dataset it represents is always a subset of the dataset that its parent represents.
0 Karma

dthompson_splun
Splunk Employee
Splunk Employee

From that same #Datasets link above I think the following helps to clarify "attributes" as an analog to "fields".

Child datasets have inheritance. Data model datasets are defined by characteristics that mostly break down into constraints and fields. Child datasets inherit constraints and fields from their parent datasets and have additional constraints and fields of their own.

0 Karma

Richfez
SplunkTrust
SplunkTrust

I think some context here may help. Could you provide a little more background?

0 Karma

aparnaa
Path Finder

I am learning splunk and wanted to know if child objects have constraints AND attributes on their own or if child objects have constraints on their own but attributes comes in from the parent

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...