Splunk Tutorials: Data Models

Knowedge Objects that provide the data structure that drives pivot by Admin & Power users

Its kind of of Framework.
Setting=>Data Models=App=>Search & reporting

Data Model 
	Data Sets
		Slices of Data

Instance Pivot
---------------
index=* sourcetype=access* status=404

Visualization => Pivot

Datsets
======================
host=homework

& Create it & Add a field

backupduration
backupvolume
date
destip
level
phyaddr
systemid
Rajesh Kumar
Follow me
Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments
0
Would love your thoughts, please comment.x
()
x