All Apps and Add-ons

Problem with MLTK to run a model

celianouguier
Explorer

Hi everyone,

I'm annoyed because I use the MLTK machine learning module to predict the score of one of my applications (using ITSI data).

For that I execute a request , I make a simple standardcalculation with a number of variables, then I run the model on my variables with standardcalculation and some other qualitative variables.

The model runs well and is saved.

When I then want to apply this model with the commands:

| apply Healthscore_Application_DB_StandardScaler_0 
| apply Healthscore_Application_DB

I have the following error

Error in 'apply' command: No valid events; check for null or non-numeric values in numeric fields

I don't understand why because I have this error also when I use exactly the same query as for learning. So there are necessarily valid events.

If anyone can help me, I'll be grateful.

0 Karma

astein_splunk
Splunk Employee
Splunk Employee

That error comes from Fit and Apply's data cleaning under the covers, check out https://docs.splunk.com/Documentation/MLApp/4.2.0/User/Understandfitandapply

when you do a |summary for the models can you see a completed model ?
When you build the models, are the permissions correctly set to use those models in another app (I think you are using ITSI for example) . https://docs.splunk.com/Documentation/MLApp/4.2.0/User/Models

Have you checked out the MLTK FAQ page for more guidance?

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...