Infrastructure Monitoring subscription usage (Host and metric plans) 🔗
Note
Read this document if your organization’s subscription plan is based on the number of hosts or metrics you’re monitoring with Infrastructure Monitoring. If your usage plan is based on the rate at which you send data points to Infrastructure Monitoring (DPM), see Infrastructure Monitoring subscription usage (DPM plans).
Splunk Observability Cloud provides a summary and detailed subscription usage reports to help you understand and manage the data you monitor with Infrastructure Monitoring. This information is available to Admin users only.
This topic describes general aspects of your usage and consumption. For more detailed billing-related queries, contact your Splunk Account Team.
Metric billing in Infrastructure 🔗
Infrastructure Monitoring collects metric time series (MTS) which are classified into different categories depending on the type of subscription you have.
Note
Each histogram data point is billed as 8 MTS. Learn more about metric categories in Metric categories.
MTS-based subscriptions 🔗
In MTS-based subscriptions, all MTS are considered custom and charged.
Host-based subscriptions 🔗
In host-based plans, the following applies:
MTS from host and container metrics and bundled metrics are covered as part of the subscription and not charged separately
MTS from custom metrics are subject to the entitlements (200 MTS per host for Enterprise plan and 100 MTS per host for Standard plan)
Additional MTS from custom metrics are charged separately per MTS
See the table for more details:
Metric category |
Description |
---|---|
Host and container metrics |
|
Bundled metrics |
|
Custom metrics |
|
Metric resolution 🔗
Metric resolution does not affect billing in host-based plans. To learn more, see Metric resolution.
Archived metrics 🔗
If you archive any of your metrics using Metrics Pipeline Management, those will be charged at 1/10th the cost of regular, real-time metrics. For more information, see Introduction to metrics pipeline management.
Access Infrastructure Monitoring usage reports 🔗
Infrastructure Monitoring usage reports help you understand the amount of data you’re sending. Use these reports to manage your costs and ensure you’re collecting the correct data.
Note
To view and download usage reports, you must be an organization admin.
View and download usage reports 🔗
Go to
to see a chart showing your current usage numbers for hosts, containers, and custom metrics. Below the chart, you might see additional charts representing usage trends that you can customize to show different data or different time periods.In View detailed usage reports, select the Usage or Usage Breakdown tabs to download available reports as a tab-delimited text file. In some browsers, you might have to right-click on a report to save the report.
If you have switched from a DPM-based subscription plan to a plan based on the number of hosts or metrics you monitor with Infrastructure Monitoring, older reports on the Usage tab indicate that they represent DPM-based data. Reports on the Usage Breakdown tab are not available for dates before changing your subscription.
Monthly usage report 🔗
This report is available on the Usage tab. For each hour within the month (or month to date, for the current month), this report shows the number of hosts and containers monitored and the number of custom metrics sent to Infrastructure Monitoring. This report follows your usage period and uses the month when a usage period starts as the label in the report link. For example, if your usage period begins on the 10th of the month, then a link for ‘March 2022’ covers from March 10 through April 9, 2022.
You can use the monthly usage report to determine whether your usage is in line with your subscription plan. You can use the data to calculate your average usage, how many hours in the month you are over or under your plan, and by how much.
The report has the following columns:
Column |
Description |
---|---|
Date |
Follows the mm/dd/yy format. |
Hour Ending |
Follows the 24 hour hh:mm UTC format. For example, 01:00 indicates the hour from midnight to 1:00 AM UTC. |
# Hosts |
The number of hosts that sent data during the specified hour. |
# Containers |
The number of containers that Infrastructure Monitoring monitored during the specified hour. |
# Custom Metrics |
The number of metric time series (MTS) that Splunk Infrastructure Monitoring monitored during the specified hour. This includes archived metrics and histogram metrics. For billing purposes, 10 archived custom metrics count as 1 real-time custom metric, and 1 histogram custom metric counts as 8 real-time custom metrics. |
# Archived custom metrics |
The number of archived metric time series (MTS) that Splunk Infrastructure Monitoring monitored during the specified hour. |
Monthly usage report (multiple organizations) 🔗
If you have multiple organizations associated with your Infrastructure Monitoring subscription, an option for a summary report that includes information on multiple organizations is also available. Similar to the Monthly usage report, this report shows hourly information for hosts, containers, and custom metrics. However, this report also includes this data for each organization associated with your subscription.
Hourly usage detail report 🔗
Available on the Usage Breakdown tab, the hourly usage report shows the information on MTS associated with data points sent from hosts or containers in a given hour. This report contains the MTS category keys and values, along with associated cloud provider metadata, within a given hour period.
The following table explains the different columns in an hourly usage detail report.
Column |
Description |
---|---|
Category Type |
Type of the MTS category: |
Category name |
Name of the MTS category: host or container. |
Token Id |
ID of the token associated with the category, if any. The row with TokenId value 0 displays the aggregate count of metrics time series (MTS) reported from that entity, including data ingested without any tokens. |
Token Name |
Name of the token associated with the category, if any. |
Category Key |
Key of the category. For example, |
Category Value |
Value of the category. |
Cloud Provider |
Name of the cloud provider for the category. |
Cloud Region |
Cloud region associated with the category, if available. |
Availability Zone |
Availability zone associated with the category, if available. |
Project Name |
Name of the project associated with the category, if available. |
Project Number |
Number of the project associated with the category, if available. |
Subscription |
Subscription associated with the category, if available. |
Dimension report 🔗
Available on the Usage Breakdown tab, the dimension report shows the MTS information associated with data points sent from hosts or containers and information related to custom and bundled MTS. It breaks down the totals by dimension so that you can trace the origination of the data.
The dimension report shows the nature of the data your organization is sending so you can adjust the data accordingly. For example, you might see some dimensions (such as environment:lab
) that indicate you are sending data for hosts or services that you don’t want to monitor using Infrastructure Monitoring.
You can select or type in a date for this report. All values in the report are based on the 24‑hour period (in UTC) for the date.
The report has 22 columns: two for dimension name and value, and four for each type of usage metric (host, container, custom, or bundled). If you are on a custom metrics subscription plan, you can’t see columns for host or container metrics in your report.
The following table explains the different columns in a dimension report:
Columns |
Description |
---|---|
Dimension Name and Dimension Value |
|
No. [usage metric type] MTS |
|
New [usage metric type] MTS |
|
Avg [usage metric type] MTS Resolution |
|
No. [usage metric type] Data points |
|
Older report format 🔗
The Dimension report is a revised format of the report formerly called the Metrics by Dimension report. If you select a date for the Dimension report earlier than the new format’s release, the report you download is formatted like the older Metrics by Dimension report. The old report format provides an aggregate view of the data; that is, it doesn’t show different values for different usage metrics (host, container, and so on).
Custom metric report 🔗
Available on the Usage Breakdown tab, custom metric report shows the information on MTS associated with data points sent from hosts or containers, as well as information related to custom and bundled MTS, for a specified date. The content of most columns in this report represents the same kinds of values as the Dimension report, except that the information is broken down by metric name instead of by dimension name and value. Therefore, you can see how Infrastructure Monitoring is categorizing data associated with each metric.
A significant difference about this report is how you can use the No. Custom MTS column. For example, there is a nonzero value in this column. In that case, the metric is designated as a custom metric, and all MTS for this metric count towards the quota associated with your Infrastructure Monitoring plan. Knowing how many custom MTS your organization is sending can help you tune your usage accordingly. For example, you might notice some custom metrics that you no longer want to report to Infrastructure Monitoring. Conversely, you might decide to increase the number of custom metrics in your plan, so that you can avoid overage charges.
On demand MTS usage reports 🔗
You can track and control metric creation and cardinality using Metrics Pipeline Management.
To get a detailed breakdown of the metric time series (MTS) you’ve created and use, you can request a usage report for a specific time interval by contacting your tech support member or your account team. Learn more at Understand your metrics usage with the metrics usage report.
System limits and data throttling 🔗
Splunk Observability Cloud products, including Infrastructure Monitoring, have system limits to protect the service’s performance. If you exceed those limits, the platform starts to throttle the data you send in.
To learn more, see Per product system limits in Splunk Observability Cloud.