nerdexam
Splunk

SPLK-1002 · Question #206

Which of the following is true about data model attributes?

The correct answer is D. They can be added to a dataset from search time field extractions. Data model attributes are fields that are added to a dataset from search time field extractions, calculated fields, lookups, or aliases. They can be created within the data model editor or inherited from a parent dataset. They can be edited or removed unless they are required…

Creating Data Models

Question

Which of the following is true about data model attributes?

Options

  • AThey cannot be created within the data model.
  • BThey can only be added into a root search dataset.
  • CThey cannot be edited if inherited from a parent dataset.
  • DThey can be added to a dataset from search time field extractions.

How the community answered

(33 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    3% (1)
  • D
    88% (29)

Explanation

Data model attributes are fields that are added to a dataset from search time field extractions, calculated fields, lookups, or aliases. They can be created within the data model editor or inherited from a parent dataset. They can be edited or removed unless they are required by the data model. They can be added to any type of dataset, not just root search datasets.

Topics

#Data Models#Attributes#Field Extraction#Dataset

Community Discussion

No community discussion yet for this question.

Full SPLK-1002 Practice