Data models
Data models are a hierarchy of related datasets. Data models are comparable to relational database schemas, if that is a familiar concept to you; they are a structured collection of related tables. Data models are a way to enable less technical users to create reports and dashboards (using Pivots, which we'll cover in the next section) without having to write the searches that generate the data that feeds them. The domain knowledge needed to build the searches that populate the datasets is encoded into the data model by people familiar with both the data and Splunk searches, or by the combined efforts of people in both camps. Let's walk through a couple of examples.
From the Search & Reporting app, click Settings | Data models ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access