Splunk
Explore the interactive ERD
Table & Field Reference
input
| Column | Type | Keys |
|---|---|---|
name | String | PK |
index | String | FK |
disabled | Boolean | |
host | String | |
source | String | |
source_type | String | |
updated | Instant |
event
| Column | Type | Keys |
|---|---|---|
_fivetran_id | String | PK |
index | String | FK |
host | String | |
line_count | Long | |
source | String | |
source_type | String | |
time | Instant |
index
| Column | Type | Keys |
|---|---|---|
name | String | PK |
block_sign_size | Long | |
cold_path | String | |
cold_path_expanded | String | |
cold_to_frozen_dir | String | |
cold_to_frozen_script | String | |
current_dbsize_mb | Long | |
datatype | String | |
default_database | String | |
disabled | Boolean | |
enable_realtime_search | Boolean | |
frozen_time_period_in_secs | Long | |
home_path | String | |
home_path_expanded | String | |
is_internal | Boolean | |
is_ready | Boolean | |
max_concurrent_optimizes | Long | |
max_data_size | String | |
max_hot_buckets | String | |
max_hot_idle_secs | Long | |
max_hot_span_secs | Long | |
max_meta_entries | Long | |
max_time | Instant | |
max_total_data_size_mb | Long | |
max_warm_db_count | Long | |
mim_raw_file_sync_secs | String | |
min_time | Instant | |
partial_service_meta_period | Long | |
quarantine_future_secs | Long | |
quarantine_past_secs | Long | |
raw_chunk_size_bytes | Long | |
rotate_period_in_secs | Long | |
service_meta_period | Long | |
summarize | Boolean | |
sync_meta | Boolean | |
thawed_path | String | |
thawed_path_expanded | String | |
throttle_check_period | Long | |
total_event_count | Long | |
updated | Instant |