All Apps and Add-ons

How can I save a value and then use it to set a parameter in the Splunk MLTK?

monicamendoza95
New Member

As a simplified example, my data looks like this:

alt text

I would like to cluster my points with MLTK's DBSCAN, using radius for the eps parameter.
My radius column is the result of an eval function. All the rows have the same value.

I am trying to use this command:

… | fit DBSCAN eps=radius metric*

But I get this error:

Error in 'fit' command: Error while initializing algorithm "DBSCAN": Invalid value for eps: must be a float

Even though when I use isnum(radius) the result is TRUE

0 Karma

grana_splunk
Splunk Employee
Splunk Employee

Hi,

You need to specify eps=0.3 instead of eps=radius as eps accepts only numeric value

http://docs.splunk.com/Documentation/MLApp/2.3.0/User/Algorithms#DBSCAN

Let me know if this solves your issue.

Thanks,

0 Karma

monicamendoza95
New Member

Specifying eps=0.3 works.
However, my "radius" value is a result of previous data manipulation (I run several SPL commands beforehand to obtain that value). If I change my data source but run the same commands, "radius" will change. So for example, it could range from 0.1 to 1.0
This is why I would like to use a variable "radius," rather than a hard-coded number.

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...