All Apps and Add-ons
Highlighted

How to find trend for StartTime column every wednesday in Splunk Machine Learning Toolkit?

New Member

Hi Team,

I wanted to know the trend of Mem_score based on Starttime every wednesday. I'm running it in forecast time series assistant(Arima).
Could you please help in correcting the query.

| inputlookup success_last_30_days.csv| eval in_epoch = strptime(time, "%m/%d/%Y %H:%M")|tstats prestats=t count where index=_internal by Starttime span=1h | timechart span=1h count
 | eval wday = strftime(StartTime, "%a") | where wday = wed | fields - wday
 | timewrap d
0 Karma
Highlighted

Re: How to find trend for StartTime column every wednesday in Splunk Machine Learning Toolkit?

Champion

are you not receiving any results at all or is there missing results?

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.