https://community.splunk.com/t5/Splunk-Search/Learning-to-use-anomalies/m-p/104044#M183128 <P>Could you provide some examples of the searches you are performing or other specifics that might help us answer your question?</P> Thu, 25 Jul 2013 13:18:51 GMT jtrucks 2013-07-25T13:18:51Z https://community.splunk.com/t5/Splunk-Search/Learning-to-use-anomalies/m-p/104043#M183127 <P>The documentation has not been much help all I really want is to start learning how to use it. Every time I try to use one of the example searches (or at least a version specific to my logs) I get: "A separating field was not found. Carrying on without it" and no unexpectedness field is visible. Does anyone no how to fix this? Or alternatively, just a few searches good for familiarizing myself with the use of anomalies? </P> <P>Here is the documentation just in case: <A href="http://docs.splunk.com/Documentation/Splunk/5.0.3/SearchReference/Anomalies">http://docs.splunk.com/Documentation/Splunk/5.0.3/SearchReference/Anomalies</A></P> Tue, 23 Jul 2013 15:41:53 GMT https://community.splunk.com/t5/Splunk-Search/Learning-to-use-anomalies/m-p/104043#M183127 passing 2013-07-23T15:41:53Z https://community.splunk.com/t5/Splunk-Search/Learning-to-use-anomalies/m-p/104044#M183128 <P>Could you provide some examples of the searches you are performing or other specifics that might help us answer your question?</P> Thu, 25 Jul 2013 13:18:51 GMT https://community.splunk.com/t5/Splunk-Search/Learning-to-use-anomalies/m-p/104044#M183128 jtrucks 2013-07-25T13:18:51Z https://community.splunk.com/t5/Splunk-Search/Learning-to-use-anomalies/m-p/104045#M183129 <P>Are you using "annomalies ... by field_name". Then the message tells you that there are some events without the field_name field I would guess.</P> Mon, 28 Sep 2020 15:41:33 GMT https://community.splunk.com/t5/Splunk-Search/Learning-to-use-anomalies/m-p/104045#M183129 fbl_itcs 2020-09-28T15:41:33Z