All Apps and Add-ons

Only ouptput results that exceed upper threshold and not below lower threshold (DensityFunction)

marshalll3302
Explorer

I've created trained a Density Function using data but ONLY want it to output outliers that exceed the upper bound and not below the lower bound. How would I do this?

My search:

index=my_index
| bin _time span=1d
| stats sum(numerical_feature) as daily_sum by department, _time
| apply my_model


Currently it is showing all outliers.

Labels (1)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

Monitoring Postgres with OpenTelemetry

Behind every business-critical application, you’ll find databases. These behind-the-scenes stores power ...

Mastering Synthetic Browser Testing: Pro Tips to Keep Your Web App Running Smoothly

To start, if you're new to synthetic monitoring, I recommend exploring this synthetic monitoring overview. In ...

Splunk Edge Processor | Popular Use Cases to Get Started with Edge Processor

Splunk Edge Processor offers more efficient, flexible data transformation – helping you reduce noise, control ...