All Apps and Add-ons

How to find trend for StartTime column every wednesday in Splunk Machine Learning Toolkit?

jcvytla
New Member

Hi Team,

I wanted to know the trend of Mem_score based on Starttime every wednesday. I'm running it in forecast time series assistant(Arima).
Could you please help in correcting the query.

| inputlookup success_last_30_days.csv| eval in_epoch = strptime(time, "%m/%d/%Y %H:%M")|tstats prestats=t count where index=_internal by Starttime span=1h | timechart span=1h count
 | eval wday = strftime(StartTime, "%a") | where wday = wed | fields - wday
 | timewrap d
0 Karma

Sukisen1981
Champion

are you not receiving any results at all or is there missing results?

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...