Splunk IAI terminology

Splunk IAI uses the following terminology to refer to concepts and features.

For more Splunk platform terminology, see the Splexicon.

Alarm

Alarms in Splunk IAI refer to third-party alarm data coming from industrial systems and software including Kepware or SCADA systems. The alarms are generally a timestamp with one or several text strings. See Associate alarm data to your asset structure in Splunk IAI.

Alert

IAI administrators can define alerts based on conditions to help users respond to anomalies in metrics. See Set alerts on metrics in Splunk IAI.

Analyze page

The Analyze page provides a workspace where you can view and investigate time-series data for a metric on an asset or a group of assets. See Analyze asset metrics in Splunk IAI in Use Splunk Industrial Asset Intelligence.

Asset

An asset is a single unit, component, or entity with various quantifiable measures, or metrics, which are unit-specific and contain one or more values. Assets can be made up of other assets. For example, a locomotive is an asset made up of thousands of other components that can also be considered assets.

Asset group

An asset group is a group of similar assets that share all or most of the same metrics. IAI admins create groups of assets so that the assets in the group can share calculated metrics, alerts, and monitor views. See Create groups of assets in Splunk IAI.

Asset hierarchy

An asset hierarchy is a group of assets, ranked one above the other, to create a relationship. The main asset has the highest rank or level, and the other ranked assets are grouped as subsets of the main asset. Splunk IAI supports up to seven levels within an asset hierarchy. See Model your asset hierarchy in Splunk IAI.

Calculated metric

Calculated metrics are custom metrics based on one or more metrics or constants. IAI admins create calculated metrics in the formula builder using various mathematical functions. Create calculated metrics on individual assets or groups of assets to monitor and alert on metrics that are not otherwise available from the raw data ingested from your industrial assets. See Calculate metrics in Splunk IAI.

Error codes

Source-generated messages that correspond to the status of the asset, usually communicating a fault or unexpected behavior.

Event

An occurrence of activity or action at a point in time. Events can include alarms, audit log entries, operator actions, system configuration changes, and system errors.

Formula builder

The formula builder allows an IAI admin to create calculated metrics using raw metrics and mathematical functions and without writing Search Processing Language (SPL). See Calculate metrics in Splunk IAI.

Metric

A metric is a set of measurements whose values can be aggregated or displayed as a time series. Metrics correspond to tags or sensors in your industrial environment. Metrics include dimension fields to split the metric data, and the asset that a metric applies to in Splunk IAI must be a dimension in the metric data point. For more information about the schema for metrics in Splunk IAI, see Data format requirements for Splunk IAI.

Monitor view

Monitor views are customized visualizations created by IAI admins that allow users to visualize and monitor metrics in a meaningful context. See Create views to monitor metrics in Splunk IAI.

Operation

Operations allow IAI administrators to separate data in Splunk IAI to create focused experiences for users with different requirements. For example, an admin might create separate operations for separate factories. This separation allows users in each factory to view only the relevant assets, metrics, monitor views, and alerts that are relevant to their factory. Operations help manufacturing plant operators focus on their specific domains in terms of regions, product lines, or other boundaries. See Organize your assets and data into separate operations in Splunk IAI.

Raw metric

A raw metric is a metric that is ingested from your operational data. See Metric.

Sensor

A sensor is a unique combination of metric_name and asset in your data. See Metric.

Tag

See Metric.