All Apps and Add-ons

Machine Learning Toolkit and Requirements

1500372
Explorer

I have an wondering about Preview Release in Machine Learning Toolkit and Showcase Documentation.
They says, Machine Learning Toolkit App is currently designed to only run on a single search head.
(https://github.com/splunk/ml-toolkit-docs/wiki)

I use Splunk Enterprise in Search Head Clustering and Indexer Clustering environment.
I would like to know what cannot be done via Clustering environment?

0 Karma

msainani_splunk
Splunk Employee
Splunk Employee

We just released the GA 1.0 version of the Machine Learning Toolkit & Showcase yesterday which supported Search Head Clustering and have removed the 50,000 limit on the fit command with this release as well. Please download the latest version posted on Splunkbase and check it out. Hope this helps!

0 Karma

jodros
Builder

To further expand on requirements, can MLT run on a 6.4 searchhead that connects back to 6.3.5 indexers?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Data Management Digest – August 2026

MichelleCorpora_1-1788182384472.png Welcome to the August 2026 edition of Data Management Digest! August was a ...

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...