https://community.splunk.com/t5/Splunk-Search/Predict-command-not-working-with-eval-count/m-p/583455#M203175 <P>I have the following query that I am working to establish a prediction for. I am able to be the volume to predict but I wanted to also predict a failure rate for this. When I add in the failure count though I do not get any results. I confirmed the query works fine when removing the predict also. Is this a limitation on predict?</P><P class="lia-align-left">&nbsp;</P><P>&nbsp;</P><LI-CODE lang="markup">|timechart span=15m count as volume, count(eval(match(login, "failure"))) as "failures" | predict volume, failures</LI-CODE><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>I also see, "<SPAN>Invalid time series index: 2".</SPAN></P> Wed, 02 Feb 2022 22:03:44 GMT SMM10 2022-02-02T22:03:44Z https://community.splunk.com/t5/Splunk-Search/Predict-command-not-working-with-eval-count/m-p/583455#M203175 <P>I have the following query that I am working to establish a prediction for. I am able to be the volume to predict but I wanted to also predict a failure rate for this. When I add in the failure count though I do not get any results. I confirmed the query works fine when removing the predict also. Is this a limitation on predict?</P><P class="lia-align-left">&nbsp;</P><P>&nbsp;</P><LI-CODE lang="markup">|timechart span=15m count as volume, count(eval(match(login, "failure"))) as "failures" | predict volume, failures</LI-CODE><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>I also see, "<SPAN>Invalid time series index: 2".</SPAN></P> Wed, 02 Feb 2022 22:03:44 GMT https://community.splunk.com/t5/Splunk-Search/Predict-command-not-working-with-eval-count/m-p/583455#M203175 SMM10 2022-02-02T22:03:44Z