Splunk is excited to introduce Resource Metrics in Workload Dashboard (WLD) — a modern and intuitive monitoring experience in the Cloud Monitoring Console (CMC) app. These new metrics are designed to complement the information that is available in the WLD Dashboard; Splunk Admins gain deeper insights into how much infrastructure capacity their Splunk deployment uses, as well as overall health and performance.
Resource metrics are a set of new metrics that Splunk launched to increase administrators’ visibility into Splunk workloads using capacity (For example, memory, CPU, I/O, Cache) to understand how organizations are using resources in each Splunk Cloud Platform deployment. With these metrics, administrators can easily identify resource bottlenecks and optimize their capacity and SVC (Splunk Virtual Compute) usage.
These metrics exist across 2 areas:
Until today, Splunk Cloud Platform customers measured their capacity using the SVC (Splunk Virtual Compute) metric alone metric. The SVC usage metric on its own cannot efficiently explain why SVC consumption might increase without a corresponding rise in search or ingest activities, or why it might remain constant despite an increase in searches. Resource Metrics in the Workload Dashboard fill that gap and provide clear SVC insights to Admins unlocking control over workload utilization within their deployment.
This enhanced visibility empowers customers to:
How can customers access the Resource Metrics?
Customers can access these metrics through the Overview and Workload dashboards.
Within the Overview dashboard, navigate to "Top Metrics" and select any of the five metrics within the "Resource Metrics" category. Customers can view these metrics and click on the drilldown link inside the top metric cards to access the Workload dashboard for further investigation.
The Workload dashboard displays resource metrics by default, complete with thresholds and recommendations for high values. Detailed visualizations are also available directly within the Workload dashboard for deeper analysis.
Metric | Threshold Levels | Effect on Stack (when high) | Recommendations when high |
---|---|---|---|
Indexer memory utilization | Optimal < 60% Elevated 60 - 80% Critical ≥ 80% |
|
|
Indexer cache churn | Optimal < 5% Elevated 5 - 20% Critical ≥ 20% |
|
|
Indexer CPU utilization | Optimal < 60% Elevated 60 - 80% Critical ≥ 80% |
|
|
Search head memory utilization | Optimal < 60% Elevated 60 - 80% Critical ≥ 80% |
|
|
Search head CPU utilization | Optimal < 60% Elevated 60 - 80% Critical ≥ 80% |
|
|
This release of Resource Metrics marks the exciting beginning of the new Workload Dashboard journey. We've just kick-started this evolution, and you can expect updates that will introduce new visualizations, that enhance visibility into these critical resource metrics, unlocking new ways that customers can monitor, troubleshoot, and predict their Splunk workloads.
Join this journey and share your feedback and ideas with us. Select the feedback button on your Workload dashboard and share your thoughts — we can't wait to hear from you!
To learn more about the Workload dashboard and the Cloud Monitoring Console (CMC), check out our comprehensive documentation.
The world’s leading organizations rely on Splunk, a Cisco company, to continuously strengthen digital resilience with our unified security and observability platform, powered by industry-leading AI.
Our customers trust Splunk’s award-winning security and observability solutions to secure and improve the reliability of their complex digital environments, at any scale.