Docs » Welcome

---

Welcome

. Get your data in The first step toward observability is getting relevant data into Observability Cloud. View all supported integrations.

Start getting data in Learn how to get data in from each layer in your stack Get data into Splunk Observability Cloud

Cloud providers Integrate to collect service metrics and logs Connect to your cloud service provider

Servers and clusters Install the Splunk Distribution of OpenTelemetry Collector to collect metrics and logs Collect infrastructure metrics and logs

Back-end apps and services Instrument to collect traces and logs Instrument back-end applications to send spans to Splunk APM

Front-end app user experiences Instrument to collect user sessions Instrument mobile and web applications for Splunk RUM

Serverless functions Instrument to collect traces and logs Instrument serverless functions for Splunk Observability Cloud

. Explore and monitor your environment After you have your data coming into Observability Cloud, it’s time to do some exploring.

Infrastructure Monitoring Monitor server and cluster metrics What can I do with Splunk Infrastructure Monitoring?

Application Performance Monitoring Monitor back-end app and service traces What can I do with Splunk APM?

Real User Monitoring Monitor data about front-end app user experiences What can I do with Splunk RUM?

Log Observer Query logs to identify root causes What can I do with Log Observer?

Synthetic Monitoring Proactively monitor the performance of web resources Splunk Synthetic Monitoring

All products Learn more about all Observability Cloud products Welcome to Splunk Observability Cloud

. Set up alerts and customize your account Prepare for issues that might arise by setting up alerts, custom dashboards, and other advanced features.

Detectors and alerts Receive alerts about conditions you care about Create detectors to trigger alerts

Dashboards and charts Get actionable insights about the systems you monitor Dashboards in Splunk Observability Cloud

Span tags Use span tags to add useful metadata to traces Add context to spans with span tags in Splunk APM

Logs pipeline Add value to your raw logs by customizing your pipeline Manage the logs pipeline

Related Content Enable users to seamlessly move across product views Related Content in Splunk Observability Cloud

Global Data Links Provide convenient access to relevant resources Link metadata to related resources using global data links in Splunk Observability Cloud

. Administer your account As an Observability Cloud administrator, use these tools to give your users a secure and relevant user experience.

Get started Learn how to set up and administer your organization Set up and administer Splunk Observability Cloud

Access tokens Authenticate and track API use Create and manage organization access tokens using Splunk Observability Cloud

Users Invite users and set access levels Create and manage users in Splunk Observability Cloud

Teams Create teams to help coordinate teamwork Create and manage teams in Splunk Observability Cloud

Single sign-on Set up an integration to an SSO provider Configure SSO integrations for Splunk Observability Cloud

Subscription Usage Monitor subscription usage for Infrastructure Monitoring Monitor Splunk Infrastructure Monitoring subscription usage

. Popular integrations Access documentation for some of the most popular integrations used to get data into Observability Cloud.

Linux Collect metrics and logs Collect Linux data

Kubernetes Collect metrics and logs Collect Kubernetes data

Windows Collect metrics and logs Collect Windows data

Amazon Web Services Collect metrics and logs Connect to AWS and send data to Splunk Observability Cloud

Azure Collect metrics Connect to Azure and send data to Splunk Observability Cloud

Browser Collect user sessions Instrument browser-based web applications for Splunk RUM

.NET Collect traces Instrument .NET applications for Splunk Observability Cloud

Java Collect traces Instrument Java applications for Splunk Observability Cloud

Ruby Collect traces Instrument Ruby applications for Splunk Observability Cloud

Node.js Collect traces Instrument Node.js applications for Splunk Observability Cloud

PHP Collect traces Instrument PHP applications for Splunk Observability Cloud

All supported integrations View a list of all supported integrations Supported integrations

GET STARTED

• Welcome to Splunk Observability Cloud
  • Get data in using supported integrations to hundreds of common data sources
  • Splunk Infrastructure Monitoring
  • Splunk Application Performance Monitoring
  • Splunk Real User Monitoring
  • Splunk Synthetic Monitoring
  • Splunk Log Observer
  • Splunk On-Call
  • Splunk Observability Cloud for Mobile

• Get started
  • 1. Create a plan and set up your organization
  • 2. Get data into Observability Cloud
  • 3. Explore and analyze your data
  • 4. Set up alerts and customize your experience
  • 5. Create global data links

• Use case: Troubleshoot an issue from the browser to the backend
  • 1. Receive alerts about outlier behavior
    • Learn more
  • 2. Assess user impact
    • Learn more
  • 3. Investigate the root cause of a business workflow error
    • Learn more
  • 4. Check on infrastructure health
    • Learn more
  • 5. Look for patterns in application errors
    • Learn more
  • 6. Examine error logs for meaningful messages and patterns
    • Learn more
  • 7. Monitor a fix
    • Learn more
  • 8. Take preventative action and create metrics from logs to power dashboards and alerts
    • Learn more

• Support
  • Use the Splunk Support Portal
    • Create a Splunk account
    • Submit a Splunk Support Portal case

DATA MANAGEMENT

• Get data into Splunk Observability Cloud
  • Per product integration recommendations
  • 1. Integrate with cloud services to send metrics and logs
    • Steps
    • Troubleshooting
  • 2. Configure servers and clusters to send metrics and logs
    • Steps
    • Troubleshooting
  • 3. Configure third-party server applications to send metrics, logs, and traces
    • Steps
    • Troubleshooting
  • 4. Instrument homegrown applications to send traces, logs, and metrics
    • Steps
    • Troubleshooting
  • 5. Instrument serverless functions to send traces and metrics
    • Steps
    • Troubleshooting
  • 6. Instrument user interfaces to send user sessions
    • Steps
    • Troubleshooting
  • 7. Configure homegrown applications and serverless functions to send custom data
    • Configuration steps for homegrown applications
    • Instrument serverless functions
    • Troubleshooting
  • 8. Use the Observability Cloud API to send custom data
    • Steps
    • Troubleshooting
  • Next steps

• Supported integrations
  • Amazon Web Services
  • Google Cloud Platform services
  • Microsoft Azure services
  • Platforms
  • APM instrumentation
  • Metric instrumentation
  • RUM instrumentation
  • Application receivers
  • Community integrations
  • Notification services
  • Login services
  • Data link destinations
  • Other integrations

• Connect to your cloud service provider

• Collect infrastructure metrics and logs

• Instrument back-end services and applications

• Instrument serverless functions

• Instrument front-end applications

• Configure application receivers

• Splunk Distribution of OpenTelemetry Collector
  • Use the Collector
    • Guided install for the Collector

• Collector commands reference
  • helm delete
    • Description
    • Syntax
  • helm install
    • Description
    • Syntax
  • helm repo add
    • Description
    • Syntax
  • helm repo update
    • Description
    • Syntax
  • journalctl
    • Description
    • Syntax
  • kubectl config
    • Description
    • Syntax
  • kubectl create
    • Description
    • Syntax
  • kubectl delete
    • Description
    • Syntax
  • kubectl describe
    • Description
    • Syntax
  • kubectl edit
    • Description
    • Syntax
  • kubectl exec
    • Description
    • Syntax
  • kubectl get
    • Description
    • Syntax
  • kubectl logs
    • Description
    • Syntax
  • restart
    • Description
    • Syntax
  • start
    • Description
    • Syntax
  • stop
    • Description
    • Syntax

• Other data ingestion methods
  • Send data using the REST API
  • Send custom metrics
  • Send metrics using client libraries
  • Use the upstream OpenTelemetry Collector

• SignalFx Smart Agent (Deprecated)

DASHBOARDS AND CHARTS

• Dashboards

• Charts

• Navigate with data links
  • Choose a data link type
    • Configure local data links
    • Click on a property value to follow a link
  • More specific data links override less specific data links
  • Local data links override equally specific global data links
  • Default links override non-default links
    • Use and view data links
  • About defining data links

• Override default time range
  • Specify a relative time range
    • Select a time range from the menu
    • Type in a relative time range
  • Specify an absolute time range
  • Pan through time ranges

• Read and write permissions
  • Read permissions for dashboard groups and dashboards
    • Rules for setting read permissions
  • Write permissions
    • Rules for setting write permissions
  • Read and write permissions management

• Related Content
  • Required metadata keys
    • APM
    • Infrastructure Monitoring
    • Log Observer
  • How to enable Related Content
  • Where can I see Related Content?

• Enable Related Content
  • How to change your metadata key names
    • Metrics and traces
    • Logs
  • Splunk APM
    • Leverage Related Content for pod-specific Kubernetes data
  • Splunk Infrastructure Monitoring
  • Splunk Log Observer
    • Methods of remapping log fields
    • Kubernetes log fields
    • Using Observability Collector for Kubernetes

ALERTS AND DETECTORS

• Introduction to alerts and detectors
  • Sample use cases of alerts and detectors
  • Detectors
    • Metadata in detectors
    • Dynamic threshold conditions
  • Alerts
  • Interaction between detectors, events, alerts, and notifications

• Alerts and detectors use case library

• AutoDetect in Splunk Observability Cloud
  • Prerequisites
  • Use AutoDetect alerts and detectors
    • View AutoDetect alerts and detectors
    • Subscribe to AutoDetect notifications
    • Copy and customize an AutoDetect detector
    • Mute AutoDetect alerts and detectors
    • Disable AutoDetect detectors

• List of available AutoDetect detectors
  • AWS
    • AWS/RDS free disk space is going to run out
  • Kafka
    • Kafka - Partition is under-replicated
    • Kafka - No Active Controller
    • Kafka - Offline partitions on a broker
    • Kafka - Consumer Group lag
  • Kubernetes
    • K8s Cluster DaemonSet ready vs scheduled
    • K8s Cluster Deployment is not at spec
    • K8s Container Restart Count is > 0
    • K8s Node Memory Utilization is high
    • K8s Nodes are not ready
  • Splunk operational
    • Splunk Operational - Container usage is expected to reach the limit
    • Splunk Operational - Datapoints are throttled
    • Splunk Operational - Detectors aborted
    • Splunk Operational - The number of detectors is expected to reach the limit
    • Splunk Operational - Host usage percentage is expected to reach the limit
    • Splunk Operational - Active MTS is expected to reach the limit
    • Splunk Operational - Custom MTS usage is expected to reach the limit

• Create detectors to trigger alerts
  • Create detectors
  • Choose how to create a detector
    • Clone an existing detector
    • Create a detector from a chart
    • Create a detector from scratch
    • Create a detector using the Splunk Infrastructure Monitoring API
  • Build detector rules
    • Select Alert signals
    • Select Alert conditions
    • Specify Alert settings
    • Alert messages
    • Alert recipients
    • Activate
    • Edit detectors through the SignalFlow tab
  • Name the detector
  • Manage detector rules
  • Set detector permissions

• View and manage permissions for detectors
  • Display a detector permissions list
  • Grant and revoke permissions for detectors
    • Grant write permissions for detectors
    • Revoke write permissions for detectors
  • Detector actions that require write permission

• Link detectors to charts
  • Link a detector to a chart
  • Unlink a detector from a chart
  • View active alerts and linked detectors
    • View active alerts related to a chart
    • View linked detectors on the Detector menu
  • List charts linked to a detector

• Manage notification subscribers
  • Manage subscribers from the Detectors tab
  • Subscribe to alerts using the Detector menu
  • Remove notification recipients from a detector
  • Do more with your notifications

• Detector options
  • Show events as lines
  • Show data markers
  • Max delay
  • Disable chart display sampling
  • Calendar time zone

• Preview detector alerts
  • How alert preview works
    • Modify an existing detector based on past activity
    • Create a new detector based on a recent alert
    • Create a new detector based on recent signal values

• View alerts
  • Review all active alerts in your organization
    • Filter alerts to reduce noise
    • Group alerts by properties or dimensions
  • See which alerts are active for a detector
  • Identify alerts from your charts
  • Find which service has active alerts in APM

• View detectors
  • View a list of all detectors
    • View detectors related to a chart or the Infrastructure Navigator
    • View an individual detector

• Add context to metrics using events
  • How events are created
  • View events
  • Create custom events
    • Create a new event from the sidebar
  • Delete custom events

• Built-in alert conditions

• Mute alert notifications
  • How muting works
  • Create muting rules
    • Mute specific detectors or alerts
    • Create muting rules based on group-by dimensions
    • Create muting rules from scratch
    • Configure and save a muting rule
  • Search and view muting rules
    • Active and scheduled muting rules
    • Muted notifications
  • Cancel or delete muting rules

• Auto-clearing alerts
  • Resolution logic

• Troubleshoot detectors
  • Troubleshoot common detector issues
  • Troubleshoot timestamp issues
  • Troubleshoot correlation conflicts
    • Use the count function to determine whether an instance should be down

APM

• Introduction to Splunk APM
  • What is Splunk APM?
  • Get your data into Splunk APM
  • What can I do with Splunk APM?

• Set up Splunk APM

• Use cases: Troubleshoot errors and monitor application performance

• Key concepts in Splunk APM
  • Services
    • Service
    • Instrumented service
    • Inferred service
    • Service map
    • Identity
    • Operation
    • Endpoint
    • Environment
  • Traces and spans
    • Trace
    • Trace Search
    • Trace View
    • Business Workflow
    • Span
    • Span tag
    • Indexed span tag
    • Tag Spotlight
  • MetricSets
    • Troubleshooting MetricSets
    • Monitoring MetricSets
    • Cardinality

• Manage services, spans, and traces in Splunk APM

• Analyze services with span tags and MetricSets

• Correlate traces to track Business Workflows

• Visualize and alert on your application in Splunk APM

• Monitor Database Query Performance

• Use Data Links to connect APM properties to relevant resources

PROFILING

• Introduction to AlwaysOn Profiling
  • What you can do with AlwaysOn Profiling
  • Memory profiling
  • Get AlwaysOn Profiling data into Splunk APM

• Splunk AlwaysOn Profiling use case library

• Get AlwaysOn Profiling data in
  • Prerequisites
  • Get profiling data in
    • Instrument your application or service
    • Enable AlwaysOn Profiling
    • Check that Observability Cloud is receiving profiling data

• Browse stack traces linked to spans
  • View all available call stacks for a span
  • Visualize all stack traces for a service using the flame graph

• Understand and use the flame graph
  • Accessing the flame graph
  • Understanding the flame graph
    • Stack frames
    • CPU and memory
    • Frame table
    • Filters
  • Use the flame graph to identify and confirm issues

• Memory profiling metrics
  • Java

• Profiling terms and concepts

• Troubleshoot AlwaysOn Profiling
  • No profiling data in Splunk Observability Cloud
    • Check that you’ve instrumented your application
    • Check the OpenTelemetry Collector configuration
    • Check that you’ve enabled AlwaysOn Profiling
  • No call stacks available for a span
  • AlwaysOn Profiling is not accessible in Observability Cloud
  • Instrumentation-specific troubleshooting

• Third-party acknowledgements

INFRASTRUCTURE

• Introduction
  • Get started with Splunk Infrastructure Monitoring
  • What can I do with Splunk Infrastructure Monitoring?

• Quick start tutorial
  • Step 1. Get platform infrastructure data into Splunk Observability Cloud
  • Step 2. Get cloud infrastructure data into Splunk Observability Cloud
  • Step 3: Monitor your platform and cloud infrastructure
  • Step 4. Activate an out-of-the-box detector to issue alerts
  • Next steps

• Set up Infrastructure Monitoring
  • Step 1. Connect cloud services
  • Step 2. Collect infrastructure data with the Splunk Distribution of OpenTelemetry Collector
  • Step 3. Monitor and troubleshoot your infrastructure

• Key concepts
  • Data link
  • Navigator
  • Resolution
  • SignalFlow
  • Virtual metrics

• Monitor services and hosts

• Use navigators
  • Drill down
  • Display related resources or views
  • Use the Dashboard section
  • Customize navigator display
    • Add filter
    • Customize time range
    • Color by
    • Group by
    • Find outliers
  • View dependencies in the navigator sidebar
    • Best practice
    • Navigate to services using the navigator sidebar
  • View alerts using navigators
  • Remove an inactive navigator

• Virtual metrics
  • About virtual metrics
  • List of virtual metrics
  • Limitations of virtual metrics

• SignalFlow and analytics

• Resolution and data retention
  • Native resolution
  • Rollups, resolution, and data retention policies
    • Rollups
    • Resolution
    • Retention

• Resolution and data retention (DPM)
  • Native resolution
  • Chart data resolution
    • Plots with different resolutions
    • Minimum chart resolution
    • Chart resolution and data retention
  • Resolution and data retention policies

• System limits
  • Abbreviations
  • Limit summaries
    • Important limits
    • Charts, detectors, and SignalFlow limits
    • Data ingestion limits
    • MTS metadata limits
    • Subscription limits
    • Web app limits
    • Other limits
  • Limit details
    • Email address invitations per minute
    • Organization invitations per day
    • Maximum number of dashboards you can retrieve
    • Number of input MTS per job
    • Maximum number of derived MTS per SignalFlow program
    • Maximum number of MTS allowed per chart data() function
    • Maximum number of MTS per detector data() function
    • Maximum number of active alerts per detector
    • Maximum number of allocated data points per SignalFlow program
    • Maximum number of functions and methods per SignalFlow program
    • Maximum number of queries per SignalFlow program
    • Maximum SignalFlow program stack size
    • Maximum number of MTS analyzed across all SignalFlow programs
    • Maximum max delay setting for SignalFlow programs
    • Maximum min delay setting for SignalFlow programs
    • Maximum number of wildcards per filter() function
    • Maximum number of prefix wildcards per filter() function
    • Maximum SignalFlow program text size
    • Maximum SignalFlow programs per minute
    • Maximum number of query arguments in a filter() function
    • Maximum number of detectors per organization
    • Maximum number of SignalFlow jobs per organization
    • Maximum number of SignalFlow jobs per websocket connection
    • New dimension or property key name limit
    • Events per minute
    • MTS creations per minute limit
    • MTS creations per hour limit
    • Number of dimensions per MTS
    • Dimension/Metric value length
    • Maximum dimension name length
    • Maximum number of API calls per minute
    • Number of tags per dimension
    • Number of properties per dimension
    • timeserieswindow API data point limit
    • Custom MTS entitlement
    • Custom MTS burst/overage limit
    • Host entitlement
    • Host burst/overage limit
    • Container entitlement
    • Container burst/overage limit
    • High resolution custom metrics entitlement
    • High resolution custom metrics burst/overage limit
    • Bundled MTS limit
    • IMTS Limit
    • AMTS limit
    • DPM limit
    • Burst DPM limit
    • Maximum rendered MTS for line, histogram, or heatmap visualizations
    • Maximum rendered MTS for area or stacked column visualizations
    • Maximum rendered MTS for column chart visualizations

LOG OBSERVER

• Introduction to Splunk Log Observer Connect
  • Region and version availability
  • What can I do with Log Observer Connect?
  • Get started with Log Observer Connect

• Set up Log Observer Connect for Splunk Cloud Platform
  • Region and version availability
  • Set up Log Observer Connect
  • Submit a support ticket
  • Troubleshooting

• Set up Log Observer Connect for Splunk Enterprise
  • Region and version availability
  • Set up Log Observer Connect
  • Troubleshooting

• Troubleshoot Log Observer Connect
  • Log Observer Connect users see unauthorized Splunk platform indexes
    • Cause
    • Solution

• Introduction to Splunk Log Observer
  • What is Log Observer?
  • What can I do with Log Observer?
  • Get started with Log Observer

• Set up Log Observer
  • What type of data is supported?
  • Prerequisites
  • Start using Log Observer
    • Collect logs from your hosts and containers
    • Collect logs from your cloud providers
    • Filter and aggregate your data in Log Observer
    • Ensure severity key is correctly mapped
    • Configure Fluentd to send logs

• Verify changes to monitored systems with Live Tail
  • View the Live Tail time range
  • Exit Live Tail
  • The Live Tail display
  • Adjust incoming log speed in Live Tail
  • Verify an integration using Live Tail
    • Example: Verify an integration with Live Tail filtering
    • Example: Verify an integration with Live Tail keyword highlighting

• View overall system health using Timeline

• Browse logs in the Logs table

• Search logs by keywords or fields
  • Discover keywords by grouping log records

• Filter logs by field

• Create field aliases
  • When to use Field Aliasing
  • Field Aliasing examples
    • Displaying a field separately in the log details flyout
    • Enabling Related Content
    • Normalizing field names
  • Create a new field alias
  • Deactivate or delete a field alias

• View problem details in an individual log

• Display a field separately in the log details flyout

• Group logs by fields using log aggregation
  • Aggregate log records
  • Example 1: Identify problems by aggregating severity by service name
  • Example 2: Identify problems by aggregating response time by request path

• Apply processing rules across historical data
  • What are search-time rules?
  • Use case for applying search-time rules
  • Create and activate a search-time rule
  • Deactivate a search-time rule
  • Save a search-time rule

• Save and share Log Observer queries
  • Save a Log Observer query
  • Use Log Observer saved queries
  • Export query results as a CSV or JSON file

• Add log views to Splunk Observability Cloud dashboards
  • Add a log view on a dashboard
  • Modify your log view from the dashboard
  • Chart actions
  • Align log views with metrics charts on the same dashboard

• Manage the logs pipeline
  • Sequence of logs pipeline rules

• Transform your data with log processing rules
  • Order of execution of logs pipeline rules
  • Field Extraction Processors
    • Create a Regex Processor
    • Create a JSON Processor
    • Create an Event Time Processor
    • Create a KV Parser Processor
  • Field Copy Processors
  • Field Redaction Processors

• Create metrics from your logs with log metricization rules
  • Order of execution of logs pipeline rules
  • Create log metricization rules
    • Create a log metricization rule from the logs pipeline
    • Create a log metricization rule in the context of a Log Observer query

• Archive your logs with Infinite Logging rules
  • Use cases for archiving your logs
    • Reduce the amount of data you indexed
    • Retain logs longer than 30 days
  • Order of execution of logs pipeline rules
  • Prerequisites
  • Create an Infinite Logging rule

• Where does a log’s logical time come from?

• Log Observer limits
  • Log Observer ingest and index limits
    • MB ingested per month
    • MB indexed per month
  • Log Observer processing rule limits
    • Maximum number of processing rules
  • Log Observer search query limits
    • Maximum number of saved search queries
    • Maximum number of logs processed for the Fields Summary
    • Maximum number of concurrent live tails

RUM

• Introduction to Splunk RUM
  • What is Splunk RUM?
  • What can I do with Splunk RUM?
  • (Optional) Link RUM spans to APM spans
  • Get data in

• Set up Splunk RUM
  • Generate your RUM access token in Observability Cloud
  • Get data in
  • Check that your data is coming in
  • Learn about the types of data RUM collects

• Splunk RUM use case library

• Data collected by Splunk RUM
  • Platform-specific RUM data

• Key concepts in Splunk RUM
  • Session
  • Session ID
  • Spans
    • Spans in Splunk RUM for Browser
    • Spans in Splunk RUM for Mobile
  • Trace
    • Browser trace
    • Back-end trace
  • User sessions
  • Span ID
  • Tag
  • RUM metrics for mobile applications
    • App start
    • App crashes and errors
    • Presentation transition
  • RUM metrics for browser applications
    • Web vitals
    • Errors
  • Error ID
  • Custom events
  • Built-in dashboards
  • Global attributes

• Create custom events
  • How custom events can add value to your organization
    • Use case
  • Create a custom event
    • Declare the tracer
    • Define the custom event
  • Advanced configurations

• Error monitoring and crash aggregation
  • Mobile crash aggregation
    • Explore top crashes across in Tag Spotlight
  • JavaScript error aggregation
    • Find the top JavaScript errors across your applications in Tag Spotlight
    • JS Errors without stacktrace, type, or message
  • Learn more

• Filter your data by tags in Splunk RUM
  • Understand the results of your search
    • Apply multiple filters under the same operator
    • Apply separate filters
  • Search for global attributes
    • Global attributes examples
    • Span attributes example
    • How to set global attributes
  • Search for unindexed tags
  • Undefined tag values
  • Search for indexed tags
  • Why are some tag values undefined?
  • Examples on how to filter by tags
    • Search by status code
    • Search for a specific browser version
    • Include all results or exclude all results

• Write custom rules for URL grouping in Splunk RUM
  • What are custom rules in Splunk RUM?
  • How to identify components of a URL
    • Example
  • How to identify tokens
    • Domain
    • Path
    • Support for # in URLs
  • Pattern syntax
    • What is a rule?
    • What is a pattern?
    • <?> Wildcard for single token
    • <??> Wildcard for one or more trailing tokens
    • Combination pattern
  • Invalid syntax
  • Use cases
    • Use a <?> wildcard to group URLs by product ID
    • Use a <?> wildcard to group by subdomain
    • Use a <??> wildcard to group by string
  • Manage URL grouping rules
    • Create a new rule
    • Edit an existing rule
    • Deactivate or reactivate a rule
    • Delete

• Alert on Splunk RUM data
  • How alerts work in Splunk RUM
    • Example
    • Integrations
    • Data retention
  • Types of metrics you can alert on
  • Alert trigger conditions
    • Configuration example
    • Increase the sensitivity of your alerts
  • Create a detector
  • Create dashboards for your RUM alerts
  • View detectors and alerts

• Splunk RUM dashboards
  • Built-in dashboards
  • Built-in dashboard use cases
    • Troubleshoot from a built-in dashboard
    • Review a larger time range of data
  • Dashboards for alerts and detectors
  • Learn more

• Splunk RUM metrics reference
  • Custom event metrics
  • Browser metrics
  • Mobile metrics
  • Learn more

• Experiment with the demo applications for Splunk RUM for Mobile
  • Android demo app
  • iOS demo app

• System limits for Splunk RUM
  • Subscriptions
  • Session limits
  • Data ingestion limits
  • MetricSet limits
  • Additional limit details for Splunk RUM
    • Bytes per minute (BPM)
    • Spans Per Minute (SPM)
    • Span size

• Third-party software

SYNTHETICS

• Introduction to Splunk Synthetic Monitoring
  • How does Splunk Synthetic Monitoring work?
  • Use cases for Splunk Synthetic Monitoring
  • Create your first test with Splunk Synthetic Monitoring

• Set up Splunk Synthetic Monitoring
  • Get started
  • Set up your first Uptime test
    • Learn more about Uptime tests
  • Set up your first Browser test
    • Learn more about Browser tests
  • (Optional) Link Synthetic spans to APM spans
  • (Optional) Configure your application
  • Continue learning

• Key concepts in Splunk Synthetic Monitoring
  • Learn more

• Synthetics use case library
  • Monitor a multi-step workflow
    • Set up a Browser test to monitor a critical workflow
    • Learn more
  • Monitor API performance for a critical workflow
    • Monitor API performance for a checkout workflow
    • Learn more about API tests
  • Monitor the performance of a user-facing application
    • Set an Uptime test to monitor a mobile app endpoint
    • Learn more

• Use a Browser test to test a webpage
  • Set up a Browser test
    • Set up a Browser test
    • View your Browser test
    • Interpret your Browser test results
    • Edit your Browser test
  • Add synthetic transactions to your Browser Test
    • What are synthetic transactions?
    • What are steps?
    • Add synthetic transactions to your Browser Test
  • Interpret Browser Test results
    • View Browser test history
    • Interpret Browser test run results
  • Browser test metrics
    • Metrics for Browser tests
    • Detect and report on your synthetic metrics

• Use an Uptime Test to test port or HTTP uptime
  • Set up an Uptime test
    • Configure an HTTP Uptime test
    • Configure a Port Uptime test
    • View your Uptime test
    • Interpret your Uptime test results
  • Interpret Uptime test results
    • View Uptime test history
    • Interpret Uptime test run results
    • Uptime test metrics

• Use an API Test to test an endpoint
  • Set up an API test
    • Set up an API test
  • Interpret API test results
    • View API test history
    • Interpret API test run results
  • API test metrics
    • Dimensions
    • Request level metrics
    • Run-level metrics

• Configure your tests
  • Configure your site to accommodate synthetic tests
    • Allow Splunk Synthetic Monitoring IP addresses
    • Exclude Splunk Synthetic Monitoring from analytics
  • Set up detectors and alerts in Splunk Synthetic Monitoring
    • Use cases for detectors in Synthetics
    • Set up a detector for a Splunk Synthetic Monitoring test
  • Built-in variables to use in tests
    • Random variables
    • Date-and-time variables
    • Location variables
    • Request variables for API Tests
    • Use a variable in a test
  • Create and use Global Variables
    • How can you use Global Variables?
    • What happens when you conceal a Global Variable?
    • Prerequisites
    • Create a new Global Variable
    • Edit a Global Variable
    • Use a Global Variable in a synthetic test
  • Public locations

METRICS

• Metrics, data points, and metric time series
  • Metrics
  • Data points
  • Metric time series
    • Use unique dimensions to create independent MTS

• Identify metric types
  • Gauges
  • Counters
  • Cumulative counters

• Dimensions, custom properties, and tags
  • Comparing dimensions, custom properties, and tags
  • Dimensions
    • Dimensions criteria
  • Custom properties
    • Custom properties criteria
  • Tags
    • Tags criteria
  • When to use each type of metadata
    • Dimensions versus custom properties
    • Tags

• Guidance for metric and dimension names
  • Existing names
  • Custom names
    • Modify naming schemes you sent to other metrics systems
  • Metric name standards
    • Create metric names using a hierarchical left to right structure
    • Use different metric names to indicate metric types
    • Metric types and rollups
  • Dimension name and value standards
    • Length limits for metric name, dimension name, and dimension value
    • Example: dimensions
    • Benefits of dimensions
    • Types of information that are suitable for dimension values
  • Example: Custom metric name and dimensions
  • Considerations for metrics and dimensions names for your organization
  • Guidelines for working with low and high cardinality data
  • Guidance for custom event names

• Use the Metric Finder and Metadata Catalog
  • Use the Metric Finder
    • Browse for metrics
    • Search metrics
    • Refine your search
    • Increase search results
    • Open a chart from a metric
    • Manage custom categories
  • Use the Metadata Catalog
    • Search and edit metadata using the Metadata Catalog

MOBILE

• Introduction to Splunk Observability Cloud for Mobile
  • What is Splunk Observability Cloud for Mobile?
  • Get started with Splunk Observability Cloud for Mobile
  • What can I do with Splunk Observability Cloud for Mobile?

• Download the app
  • Requirements
    • iOS requirements
    • Android requirements
  • Download Splunk Observability for Mobile from the App Store
  • Download Splunk Observability for Mobile from the Google Play store
  • User Authentication in Splunk Observability for Mobile

• View dashboards and alerts
  • View dashboards using Splunk Observability Cloud for Mobile
    • View and search dashboards
  • View alerts using Splunk Observability for Mobile
    • View alerts
    • Share alerts

ADMINISTER OBSERVABILITY CLOUD

• Set up and administer Splunk Observability Cloud

• Create and manage users
  • Add users to the organization
  • Remove users from the organization
  • Grant and revoke administrative access
  • Request administrative access
  • Look up when a user logged in
  • Address a locked user account
  • Change color accessibility settings

• Create and manage teams

• Create and manage authentication tokens

• View organization metrics
  • View organization metrics
  • Interpret and work with usage metrics
    • Metrics for values by token
    • Metrics with values for each metric type
    • A metric that counts stopped detectors
    • Metrics that track system limits
    • Authentication error metrics
    • Compare gross and num metric values
  • Metric Details
  • Get help

• Use case: Maintain a secure organization with many teams and users
  • Enhance team security with access restrictions and tokens
    • Learn more
  • Limit who can edit a detector
    • Learn more
  • Prevent people on other teams from viewing and changing your dashboards
    • Learn more
  • Summary

SETTINGS AND REFERENCE

• Password and contact information

• Organizations

• Teams

• Time zone and color accessibility settings

• API access token

• Supported browsers

• Third-party software credits

• Data retention
  • Data retention in Infrastructure Monitoring
  • Data retention in Real User Monitoring (RUM)
  • Data retention in Application Performance Monitoring (APM)
  • Data retention in Log Observer
  • Data retention in Splunk On-Call

• Glossary

---

Next

Welcome to Splunk Observability Cloud

❯

---

• API docs
• Blog
• Training
• Free Trial