https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-trigger-alert-based-on-time-series-forecasting-model/m-p/471059#M57878 <P>Hi,</P> <P>I am trying to forecast %sales against time. I used the time series forecasting model in Splunk and have received prediction against time. (used kalman filter and kept Future timespan as 1112, Data received through a lookup CSV)</P> <P>I have already created an alert for this experiment based on forecasting value greater than 80% and have kept the action as email however the alert is not getting triggered. </P> <P>Can you please suggest how to trigger the alert?<BR /> Is there any setting which are to be changed(already set up email settings)?<BR /> Can this use case be implemented using Splunk?</P> Tue, 29 Oct 2019 12:27:44 GMT yam2002 2019-10-29T12:27:44Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-trigger-alert-based-on-time-series-forecasting-model/m-p/471059#M57878 <P>Hi,</P> <P>I am trying to forecast %sales against time. I used the time series forecasting model in Splunk and have received prediction against time. (used kalman filter and kept Future timespan as 1112, Data received through a lookup CSV)</P> <P>I have already created an alert for this experiment based on forecasting value greater than 80% and have kept the action as email however the alert is not getting triggered. </P> <P>Can you please suggest how to trigger the alert?<BR /> Is there any setting which are to be changed(already set up email settings)?<BR /> Can this use case be implemented using Splunk?</P> Tue, 29 Oct 2019 12:27:44 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-trigger-alert-based-on-time-series-forecasting-model/m-p/471059#M57878 yam2002 2019-10-29T12:27:44Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-trigger-alert-based-on-time-series-forecasting-model/m-p/471060#M57879 <P>Are you certain the alert should have been triggered? (i.e. you ran the search over the time frame of an alert and it had a value greater than .8?) If so, you can look in the <CODE>_internal</CODE> logs to see why the alert (search <CODE>index=_internal {nameOfAlert} ("error" OR "fail")</CODE>) wasn't working. Otherwise, could you clarify what you're asking?</P> Wed, 30 Oct 2019 17:10:32 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-trigger-alert-based-on-time-series-forecasting-model/m-p/471060#M57879 aberkow 2019-10-30T17:10:32Z