All Apps and Add-ons

Problem with MLTK to run a model

celianouguier
Explorer

Hi everyone,

I'm annoyed because I use the MLTK machine learning module to predict the score of one of my applications (using ITSI data).

For that I execute a request , I make a simple standardcalculation with a number of variables, then I run the model on my variables with standardcalculation and some other qualitative variables.

The model runs well and is saved.

When I then want to apply this model with the commands:

| apply Healthscore_Application_DB_StandardScaler_0 
| apply Healthscore_Application_DB

I have the following error

Error in 'apply' command: No valid events; check for null or non-numeric values in numeric fields

I don't understand why because I have this error also when I use exactly the same query as for learning. So there are necessarily valid events.

If anyone can help me, I'll be grateful.

0 Karma

astein_splunk
Splunk Employee
Splunk Employee

That error comes from Fit and Apply's data cleaning under the covers, check out https://docs.splunk.com/Documentation/MLApp/4.2.0/User/Understandfitandapply

when you do a |summary for the models can you see a completed model ?
When you build the models, are the permissions correctly set to use those models in another app (I think you are using ITSI for example) . https://docs.splunk.com/Documentation/MLApp/4.2.0/User/Models

Have you checked out the MLTK FAQ page for more guidance?

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...