Splunk’s metric index has changed a lot since we launched it back in Splunk Enterprise 7.0. In this latest iteration, we have upgraded our data model and metric index to natively ingest and store multiple metrics in a single event to further reduce its storage footprint and lower total cost of ownership. This session with provide a deep-dive into our latest metric index layout, its evolution since introduction in Splunk Enterprise 7.0, and how it varies from a log index storage layout.

Speaker(s)
Murugan Kandaswamy, Senior software engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN2268.pdf?podcast=1577146225

Product: Splunk Enterprise, Splunk Cloud

Track: Foundations/Platform

Level: Advanced