Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

If a Data Model is being fed by a tag and the data that is tagged belongs to a single sourcetype, does the data model have to be rebuilt if an additional sourcetype is tagged in the same way?

$
0
0
We have an accelerated Data Model in which data is being supplied by a tag. This tag includes a set of data within a single source-type. We now have a separate set of data with a majority of its fields that are similar. If we tag the 2nd source-type using the same tag as the first subset, will the Data Model have to be rebuilt? Additionally, what kind of issues might arise from such a situation?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>