In this first recipe, you will create a data model for our web access logs. You will be using Splunk's Data Model Editor to define several data model dataset types and add dataset constraints and fields.
Creating a data model for web access logs
Getting ready
To step through this recipe, you will need a running Splunk Enterprise server, with the sample data loaded from Chapter 1, Play Time - Getting Data In. You should also have completed the recipes from the earlier chapters. You should be familiar with navigating the Splunk user interface.
How to do it...
Follow...