Analyzing data in the Splunk Metrics Workspace

Your team manages a bike share program that allows users to check out bicycles using a mobile application.

To gain better insight into your business, you want to analyze the following metrics:

• Inventory status over time
• User availability checks over time
• Social media mentions over time
• User sentiment over time

This use case uses a metrics data source designed to help you get started with the Splunk Metrics Workspace. To work through this use case, you need the following:

• Splunk Web version 7.0 or later with the Metrics Workspace installed
• Admin-level access
• Unzipped sample data

Create a metrics index and upload the sample data using Splunk Web. Then locate and analyze your data in the Metrics Workspace.

1. Create a metrics index
2. Upload data from a CSV file
3. Locate your data in the Splunk Metrics Workspace
4. Analyze your data in the Splunk Metrics Workspace

Create a metrics index

1. In Splunk Web, navigate to Settings > Indexes and click New Index.
2. For Index Name, type "bikes".
3. For Index Data Type, click Metrics.
4. For the remaining properties of the index, use the default values.
5. Click Save.

Upload data from a CSV file

1. In Splunk Web, go to Settings > Add Data.
2. Scroll down and click Upload files from my computer.
3. Under Select Source, click Select File.
4. Locate the metrics-bikes.csv file in your file directory system, and click Open.
5. After the file uploads to Splunk Web, click Next.
6. Under Set Source Type, click the Source type drop-down list, and click Metrics > metrics_csv. Then click Next.
7. (Optional) On the Input Settings page, under Host, specify a host value.
8. On the Input Settings page, under Index, select bikes. Then click Review.
9. Review your data upload settings. Then click Submit.

Locate your data in the Splunk Metrics Workspace

1. Navigate to the Search & Reporting app.
2. Click the Metrics tab to open the Splunk Metrics Workspace.
3. In the Data panel, click Metrics to view a list of metrics data sources. DemoBikeMetrics appears in the list of metrics data sources.

Analyze your data in the Splunk Metrics Workspace

1. To view a chart showing checked-out bike inventory over time, click Metrics > DemoBikeMetrics > LiveInventory > CheckedOut.
2. In the global actions bar, click the time range picker, and select Last 48 hours. The workspace time range expands to show a wider range of data.
3. To view a chart showing user availability checks over time, click Metrics > DemoBikeMetrics > MobileApp > AvailabilityCheckRequests.
   
4. To view a chart showing social media mentions over time, click Metrics > DemoBikeMetrics > Social > News.
5. To view a chart showing user sentiment over time, click Metrics > DemoBikeMetrics > Social > Sentiment.
   
6. To view how your metrics vary based on location, select any chart in the workspace. In the Analysis panel, under Split By, select city. Repeat this process for each of the other three charts in the workspace.
7. To view the workspace in grid layout, click the grid icon in the global actions bar.

Summary

From the charts in the workspace, you can deduce that there is a positive correlation between checked-out inventory and user availability requests. There is also a positive correlation between social media mentions and user sentiment. These metrics all peak during certain times of the day, most likely during typical commute hours.

For more information about analyzing data in the Splunk Metrics Workspace, see Analytics in the Splunk Metrics Workspace.