Objective 8.3

O11y Cloud Certified Metrics User

Create detectors to monitor populations

Objective 8.3 sits in Detectors for Common Use Cases, which carries 15% of the O11y Cloud Certified Metrics User exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.

Objective title verbatim from the official objectives. Splunk exam page

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

8-3Detectors for Common Use Cases

An analyst must watch CPU across thirty hosts in one cluster. What does Splunk document as the efficient approach?

Thirty separate detectorsThirty detectors is exactly what the approach avoids.
One detector, filtered by tagCorrect · your answerCorrect.
One detector per severity levelSeverity levels are rules within one detector.
One detector per dashboardDashboards do not scope detectors.

Correct.

Checked against help.splunk.com, August 2026

Concept

Filtering by a shared dimension makes population size irrelevant to the number of objects you maintain. That is the whole argument for metadata-driven alerting.

Why B

Splunk documents creating a single detector that filters hosts using the service dimension and evaluates them against the threshold, which triggers individual alerts for each host.

Source

In this case, if you want to track whether CPU utilization remains below 70% for each of those hosts, you can create a single detector for the cpu.utilization metric that filters hosts using the service:kafka dimension and evaluates them against the static threshold of 70.

Splunk Docs: Best practices for creating detectors in Splunk Observability Cloud, checked August 2026
#detectors#populations

Now you: objective 8.3 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

8-3Detectors for Common Use Cases

An analyst asks when a single population detector works best. What condition does Splunk document?

Sample question 2 of 3

8-3Detectors for Common Use Cases

An analyst wants the 95th percentile of CPU per service across a hundred hosts. Which approach does Splunk document?

Sample question 3 of 3

8-3Detectors for Common Use Cases

An analyst groups a detector by service and finds it does not work. Which metadata kind does Splunk document as unsupported for that?

Full O11y Cloud Certified Metrics User question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Detectors for Common Use Cases