SPLK-DMOD - Data Models

Topic 1 – Introduce Data Model Datasets

• Explore data models
• Add event, search, and transaction datasets to data models
• Identify event object hierarchy and constraints
• Add fields based on eval expressions to transaction datasets

Topic 2 – Design Data Models

• Create a data model
• Add root event datasets to a data model
• Add fields to data models
• Add child datasets to a data model
• Test a data model
• Define permissions for a data model
• Upload/download a data model for backup and sharing

Topic 3 – Create a Pivot

• Identify benefits of using Pivot
• Create and configure a Pivot
• Visualize a Pivot
• Save a Pivot
• Use Instant Pivot
• Access underlying search for Pivot

Topic 4 – Accelerate Data Models

• Define ad-hoc and persistent data model acceleration
• Accelerate a data model
• Describe the role of tsidx files in data model acceleration
• Review considerations about data model acceleration