Working with Metrics

The Working with Metrics course provides Splunk users in-depth information about metrics, ingesting and searching metrics data, and how to use the Metrics Workspace to analyze and create visualizations.


Units : 2
Duration : 9 hours over 2 days
Time : 9:00 am – 1:00 pm AEST (GMT +10)

*Course discounts apply for Splunk Partners.

One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress.

Participant, Splunk Enterprise Data Administration

Course Topics
  • Metrics Overview

  • Metrics Terminology

  • Onboard Metrics Data

  • Metrics Indexing

  • Protocols to Ingest Metrics Data

  • Metrics SPL Commands

  • Log to metrics Conversion

  • Use the Metrics Workspace

  • Metrics Best Practices Course

Class Format

Instructor-led lecture with labs. Delivered via virtual classroom or at your site

Course Prerequisites
  • Fundamentals 1 (Required)

  • Fundamentals 2 (Required)

  • Splunk Enterprise System Administration (Required)

  • Splunk Enterprise Data Administration (Recommended)

Related Certifications




After completing this course you will be able to


Course Objectives

Module 1 – Metrics Overview

  • Overview of metrics data and terminology

  • Review Splunk framework for metrics

  • Discuss metrics use cases


Module 2 – Onboarding Metrics Data

  • Review metrics source types and protocols

  • Describe metrics indexing

  • Introduce rollup policies

  • Review the process of ingesting metrics data

Module 3 – Log to Metrics

  • Create metrics data from events

  • Create a log to metrics source type

  • Ingest event and metrics data from log files


Module 4 – Searching Metrics Data

  • Search metrics data using SPL

  • Review the Metrics Workspace

  • Use the metrics workspace to analyze and visualize metrics data

Course Schedules and Timezones

Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones.

Dates and times displayed for each course are relative to Australian Eastern Time (AET).

AM Marked Courses

AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas;

  • UTC+10 including Australia (East Coast)

  • UCT+11/+12 including New Zealand and the Pacific Islands

  • UTC-8 including USA (West Coast), Canada (West Coast)

  • UTC-7 including USA (Mid West)

PM Marked Courses

PM marked courses start at AET  2:00pm and finish at AET 6:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas;

  • UTC+9 including Japan, Korea

  • UTC+8 including Australia (West Coast), Singapore, Hong Kong, China, Philippines, Brunei, Thailand

  • UTC +5/+6 including India and Sri Lanka

Upcoming Courses


Copyright 2020/2021