Skip to main content

Splunk Training + Certification

Working with Metrics in Splunk

Course Description

This course provides Splunk users in-depth information about metrics, ingesting and searching metrics data, and how to use the Metrics Workspace to analyze and create visualizations.


Instructor-led Training Schedule

Course Prerequisites

  • Splunk Fundamentals 1
  • Splunk Fundamentals 2
  • Splunk Enterprise System Administration
Strongly Recommended:
  • Splunk Enterprise Data Administration

Course Topics

  • Metrics Overview
  • Metrics Terminology
  • Onboard Metrics Data
  • Metrics Indexing
  • Protocols to Ingest Metrics Data
  • Metrics SPL Commands
  • Log to metrics Conversion
  • Use the Metrics Workspace
  • Metrics Best Practices

Course Objectives

Module 1 – Metrics Overview
  • Overview of metrics data and terminology
  • Review Splunk framework for metrics
  • Discuss metrics use cases
Module 2 – Onboarding Metrics Data
  • Review metrics source types and protocols
  • Describe metrics indexing
  • Introduce rollup policies
  • Review the process of ingesting metrics data
Module 3 – Log to Metrics
  • Create metrics data from events
  • Create a log to metrics source type
  • Ingest event and metrics data from log files
Module 4 – Searching Metrics Data
  • Search metrics data using SPL
  • Review the Metrics Workspace
  • Use the metrics workspace to analyze and visualize metrics data