<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How do I predict the monthly data using predict command in splunk? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-do-I-predict-the-monthly-data-using-predict-command-in/m-p/402026#M168734</link>
    <description>&lt;P&gt;Sample Data; &lt;BR /&gt;
Month Year   X1&lt;BR /&gt;
5     2015   220&lt;BR /&gt;
6     2015   210&lt;BR /&gt;&lt;BR /&gt;
7     2015   225&lt;/P&gt;

&lt;P&gt;Output&lt;/P&gt;

&lt;P&gt;Predicted results: &lt;/P&gt;

&lt;P&gt;Month  year    x1&lt;BR /&gt;
8   2015   220&lt;BR /&gt;
9   2015   223.4&lt;/P&gt;

&lt;P&gt;I have three years of data. any suggestion would be helpful.  &lt;/P&gt;</description>
    <pubDate>Fri, 22 Jun 2018 20:39:09 GMT</pubDate>
    <dc:creator>saranravi</dc:creator>
    <dc:date>2018-06-22T20:39:09Z</dc:date>
    <item>
      <title>How do I predict the monthly data using predict command in splunk?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-do-I-predict-the-monthly-data-using-predict-command-in/m-p/402026#M168734</link>
      <description>&lt;P&gt;Sample Data; &lt;BR /&gt;
Month Year   X1&lt;BR /&gt;
5     2015   220&lt;BR /&gt;
6     2015   210&lt;BR /&gt;&lt;BR /&gt;
7     2015   225&lt;/P&gt;

&lt;P&gt;Output&lt;/P&gt;

&lt;P&gt;Predicted results: &lt;/P&gt;

&lt;P&gt;Month  year    x1&lt;BR /&gt;
8   2015   220&lt;BR /&gt;
9   2015   223.4&lt;/P&gt;

&lt;P&gt;I have three years of data. any suggestion would be helpful.  &lt;/P&gt;</description>
      <pubDate>Fri, 22 Jun 2018 20:39:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-do-I-predict-the-monthly-data-using-predict-command-in/m-p/402026#M168734</guid>
      <dc:creator>saranravi</dc:creator>
      <dc:date>2018-06-22T20:39:09Z</dc:date>
    </item>
    <item>
      <title>Re: How do I predict the monthly data using predict command in splunk?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-do-I-predict-the-monthly-data-using-predict-command-in/m-p/402027#M168735</link>
      <description>&lt;P&gt;Hi,&lt;BR /&gt;
I am assuming you had a look at the predict command documentation - &lt;A href="https://docs.splunk.com/Documentation/Splunk/7.1.1/SearchReference/Predict" target="_blank"&gt;https://docs.splunk.com/Documentation/Splunk/7.1.1/SearchReference/Predict&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;Now, you need to try the various algorithm options as mentioned in the table. If your data is seasonal / periodic etc.  , your algorithm option should be based on that. I suggest starting with LLP5  and LLP first.&lt;BR /&gt;
2 key points to remember&lt;BR /&gt;
1-Please specify a holdback period, this will allow you to see how accurate your predictions are. from the document above - holdback&lt;BR /&gt;
Syntax: holdback=&lt;BR /&gt;
Description: Specifies the number of data points from the end that are not to be used by the predict command. Use in conjunction with the future_timespan argument. For example, 'holdback=10 future_timespan=10' computes the predicted values for the last 10 values in the data set. You can then judge how accurate the predictions are by checking whether the actual data point values fall into the predicted confidence intervals.&lt;BR /&gt;
Default: 0&lt;BR /&gt;
2-Remember , your data must have some underlying pattern for a algorithm to be successful. Try out the algorithm options  with holdback and one of them should fit your use case,&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 20:08:43 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-do-I-predict-the-monthly-data-using-predict-command-in/m-p/402027#M168735</guid>
      <dc:creator>Sukisen1981</dc:creator>
      <dc:date>2020-09-29T20:08:43Z</dc:date>
    </item>
  </channel>
</rss>

