SPLK-WOMET8.1 - Working with Metrics in Splunk 8.1

This nine hour course provides Splunk users in-depth information about metrics, ingesting and searching metrics data, and how to use the Analytics Workspace to analyze and create visualizations.

Duration: 2.0 days

Enquire Now

Start learning today!

Click Hereto customize your Training


  • Metrics Overview
  • Metrics Terminology
  • Onboard Metrics Data
  • Metrics Indexing
  • Protocols to Ingest Metrics Data
  • Metrics SPL Commands
  • Performing Log to Metrics Conversion
  • Using the Analytics Workspace
  • Metrics Best Practices


Module 1 - Metrics Overview

  • Understand the differences between metrics and events
  • Describe metrics and metrics terminology
  • Identify the storage and performance benefits of metrics
  • Review use cases for searching metrics data
  • Describe metrics dimensions and time series

Module 2 - Indexing and Searching Metrics

  • Describe metrics indexing
  • Create metrics indexes
  • Onboard metrics data
  • Use the mcatalog, msearch, and mstats commands

Module 3 - Bringing Metrics Into Splunk: Metrics-Formatted Data

  • Review metrics source types and supported protocols
  • Use collected to ingest metrics data
  • Use StatsD to ingest metrics data
  • Verify onboarding of metrics

Module 4 - Bringing Metrics Into Splunk: Converting Logs to Metrics

  • Describe the log-to-metrics process
  • Use m collect and m event collect to convert logs to metrics at search time
  • Use Splunk Web to convert logs to metrics at ingent time
  • Use config files to convert logs to metrics at ingest time

Module 5 - Managing Metrics Indexes and Metrics Rollups

  • Manage metrics indexes
  • Understand metrics rollups
  • Configure rollup policies

Module 6 - Analytics Workspace and SAI

  • Use the Analytics Workspace to analyze and visualize metrics data
  • Describe the Splunk App for Infrastructure (SAI)

Module 7 - Best Practices and Performance Tuning

  • Describe metrics best practices
  • Tune the performance of metrics processing





  • Fundamentals 1
  • Fundamentals 2
  • Splunk System Administration


  • Splunk Data Administration
  • Splunk Fundamentals 3
  • Some Linux experience



Course Benefits

  • Career growth
  • Broad Career opportunities
  • Worldwide recognition from leaders
  • Up-to Date technical skills
  • Popular Certification Badges

Splunk Popular Courses


This "Fast Start" course covers over 60 commands and functions and prepares students to be search experts.


This course prepares security practitioners to use SOAR to respond to security incidents.


This course focuses on creating inputs, chain searches, event annotations, and improving dashboard performance.


This course focuses on dashboard creation, including prototyping, the dashboard definition, layouts types, adding visualizations, and dynamic coloring.
Enquire Now
By clicking "Submit", I agree to the Terms Of Use and Privacy Policy