Implementing Splunk 7, Third Edition - Third Edition

Creating a metrics index

Splunk stores metrics data in a new type of index that is specifically for metrics data; in fact, this type of index can only be used for metrics data. The best way to create a metrics index is through Splunk Web:

1. Go to Settings and then Indexes.
2. On the Indexes page, click on New.
3. For Index Name, type a name for your index. User-defined index names must consist of only numbers, lowercase letters, underscores, and hyphens. Index names cannot begin with an underscore or hyphen, or contain the word kvstore.
4. For Index Data Type, click on Metrics.
5. Enter the remaining properties of the index as needed.
6. Click on Save.