topic Re: MLTK: Does it support multi-output classification? in Splunk Enterprise Security

MLTK: Does it support multi-output classification?

danman81 — Wed, 09 Oct 2019 17:46:54 GMT

Does the MLTK support multi-output classification, i.e., more than 1 predicted field?

Thank you.

Re: MLTK: Does it support multi-output classification?

ivanreis — Thu, 10 Oct 2019 00:27:36 GMT

I am not playing too much with MLTK, so If I understood your question properly, the new version 4.4 of MKTL can work with multiple predicted fields,
Please read this doc -> https://www.splunk.com/blog/2019/08/14/what-s-new-in-the-splunk-machine-learning-toolkit-4-4.html
suggestion for you to deploy the MLTK v4.4 in a sandbox to play around and validate if you are able to use this functionality.

Re: MLTK: Does it support multi-output classification?

danman81 — Thu, 10 Oct 2019 11:40:36 GMT

I'm sorry, but this does not answer my question. I am looking for categorical prediction, not numerical prediction. It looks like multi-output classification is not yet supported by the MLTK out-of-the-box.

Re: MLTK: Does it support multi-output classification?

ivanreis — Thu, 10 Oct 2019 23:02:20 GMT

I really appreciated your feedback, thus I am not aware if this functionality will be supported in the future. thanks

Re: MLTK: Does it support multi-output classification?

ivanreis — Thu, 10 Oct 2019 23:06:22 GMT

I suggest for you to visit this link
-> https://www.splunk.com/blog/2019/08/14/what-s-new-in-the-splunk-machine-learning-toolkit-4-4.html
and make this question at "Join the Discussion" to see if Splunk have plans to add such functionality