Objective 8.1

O11y Cloud Certified Metrics User

Identify common issues with detectors

Objective 8.1 sits in Detectors for Common Use Cases, which carries 15% of the O11y Cloud Certified Metrics User exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.

Objective title verbatim from the official objectives. Splunk exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

8-1Detectors for Common Use Cases

An engineer names jvm.* in a detector so one threshold covers a whole family of metrics at once. Why is that wildcard discouraged?

It disables the severity levelsSeverity labelling is unaffected by the signal name.
It slows the detector downPerformance is not the documented objection.
It can include other metric typesCorrect · your answerCorrect.
It prevents cloning the detector laterCloning works regardless of the metric name.

Correct.

Checked against help.splunk.com, August 2026

Concept

A threshold only means something against one kind of measurement. A wildcard that sweeps in uptime alongside heap makes the comparison meaningless.

Why C

Splunk documents not using wildcards, warning that a name such as jvm.* can evaluate metrics of different types against the same threshold, which might lead to unexpected results.

Source

Do not use wildcards. If you use wildcards in your metric name, make sure that the wildcards do not mistakenly include metrics of different types.

Splunk Docs: Best practices for creating detectors in Splunk Observability Cloud, checked August 2026
#detectors#pitfalls

Now you: objective 8.1 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

8-1Detectors for Common Use Cases

An analyst builds a detector from a chart showing a day of data. Which problem does Splunk document?

Sample question 2 of 3

8-1Detectors for Common Use Cases

An analyst is about to turn a rolled-up chart into a detector and needs the alert to match what the detector really evaluates. What should be viewed first?

Sample question 3 of 3

8-1Detectors for Common Use Cases

A chart rolls its data up into five minute points, and an analyst sets a one minute smoothing duration on it. What happens to that duration parameter?

Full O11y Cloud Certified Metrics User question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Detectors for Common Use Cases