Creating Data Models: Object ATTRIBUTES do not define ___________.

In a data model, the “Attributes” section is used to describe the object itself (name, display name, tags, description) and to define or inherit the list of fields that belong to the object.

The SPL search that populates the object comes from the Constraints (sometimes shown in its own tab), not from the Attributes area. Therefore, Attributes do not define the base search for the object, but they do define the object’s fields.

B. fields for the object – Attributes explicitly include field definitions or inheritance, so this statement is false.

1. Splunk Enterprise Knowledge Manager Manual

v9.1

“Add data model objects

” Step 4-6: Attributes vs. Constraints (docs.splunk.com; paragraph under “Specify object attributes”).

2. Splunk Fundamentals 2 Courseware

Module “Building Data Models

” slide “Object Attributes

” states: “Attributes define field list; base search is set in Constraints.”

3. Splunk Enterprise Knowledge Manager Manual

v9.1

“About data model objects

” first bullet list (object attributes) – does not list base search but lists fields.