All Apps and Add-ons

Only ouptput results that exceed upper threshold and not below lower threshold (DensityFunction)

marshalll3302
Explorer

I've created trained a Density Function using data but ONLY want it to output outliers that exceed the upper bound and not below the lower bound. How would I do this?

My search:

index=my_index
| bin _time span=1d
| stats sum(numerical_feature) as daily_sum by department, _time
| apply my_model


Currently it is showing all outliers.

Labels (1)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...