topic Re: Help with ML finding RCA from dimensions in Knowledge Management https://community.splunk.com/t5/Knowledge-Management/Help-with-ML-finding-RCA-from-dimensions/m-p/469799#M8134 <P>Predict Categorical Assistant could be applied on this straight ahead using MLTK or you can use classifier algorithms like Random Forest Classifier directly via spl.</P> Fri, 25 Oct 2019 16:05:40 GMT hkeswani_splunk 2019-10-25T16:05:40Z Help with ML finding RCA from dimensions https://community.splunk.com/t5/Knowledge-Management/Help-with-ML-finding-RCA-from-dimensions/m-p/469798#M8133 <P>Hello, first steps with ML, appreciate guidance on which ML method to use to get started.</P> <P>We have a set of metrics marked as Good\Bad and we want to identify a probable root cause based on the various dimensions.</P> <UL> <LI>See below CSV example, there are 2 entries with bad values for metric "health"</LI> <LI>There are multiple dimensions OS, Server, Storage</LI> <LI>in this case the root cause is OS = Win7, which is easy to point out</LI> </UL> <P>What ML method can be used to provide the correct result?</P> <P>Thanks!</P> <P>Name,metric_name,result,OS,Server,Storage<BR /> PC-1,health,good,Win10,Server1,S1<BR /> PC-2,health,good,Win10,Server2,S1<BR /> PC-3,health,good,Win10,Server3,S1<BR /> PC-4,health,good,Win10,Server1,S1<BR /> PC-5,health,good,Win10,Server2,S1<BR /> PC-6,health,good,Win10,Server3,S2<BR /> PC-7,health,good,Win10,Server1,S2<BR /> PC-8,health,good,Win10,Server2,S2<BR /> PC-9,health,bad,Win7,Server3,S2<BR /> PC-10,health,bad,Win7,Server1,S2</P> Fri, 25 Oct 2019 10:58:38 GMT https://community.splunk.com/t5/Knowledge-Management/Help-with-ML-finding-RCA-from-dimensions/m-p/469798#M8133 kuzkuz 2019-10-25T10:58:38Z Re: Help with ML finding RCA from dimensions https://community.splunk.com/t5/Knowledge-Management/Help-with-ML-finding-RCA-from-dimensions/m-p/469799#M8134 <P>Predict Categorical Assistant could be applied on this straight ahead using MLTK or you can use classifier algorithms like Random Forest Classifier directly via spl.</P> Fri, 25 Oct 2019 16:05:40 GMT https://community.splunk.com/t5/Knowledge-Management/Help-with-ML-finding-RCA-from-dimensions/m-p/469799#M8134 hkeswani_splunk 2019-10-25T16:05:40Z