All Apps and Add-ons

Dimensions and splunk machine learning app

winknotes
Path Finder

Under 'Detect Categorical Outliers' (sgname is the dimension of the name of logical device groupings). The mstats query gathers write response time for a number of device groupings.

| mstats avg(write_response_metric_name) WHERE index=myindex span=5m by sgname

My question is how can I detect outliers accurately but still know which group it's associated with? If I select the sgname and the metric it returns a very different result than just selecting the metric itself.

Any help would be appreciated.

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...