All Apps and Add-ons

Splunk Machine Learning Toolkit: How to make DBSCAN work with partial fit?

rosho
Communicator

Hi,
I am working on a Forecasting problem. This is my procedure:

a) Standard scaler (supports partial fit)
b) Detect outliers using DBSCAN (does not support partial fit)
c) Forecast with Kalman filter (not sure of this???) or MLP (supports partial fit)

So, I would like to know if this procedure is possible to use "partial fit" (incremental learning)?
Or do all algorithms have to support partial fit?

Thank you.

0 Karma

grana_splunk
Splunk Employee
Splunk Employee

Can you add more detail on your usecase? Also, I would recommend you to use StateSpace algorithm for forecasting as it supports partial fit. Check the documentation here: https://docs.splunk.com/Documentation/MLApp/4.2.0/User/Algorithms#StateSpaceForecast

0 Karma

rosho
Communicator

Hi @grana_splunk

I am predicting the number of logins. My dataset has the number of logins by hour (1 month).

I use a) and b) to clean the data (removing or transforming outliers).
With c) I forecast

a) Standard scaler
b) Detect outliers using DBSCAN
c) Forecast with Kalman filter or MLP

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Data Management Digest – August 2026

MichelleCorpora_1-1788182384472.png Welcome to the August 2026 edition of Data Management Digest! August was a ...

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...