Dashboards & Visualizations

How to compare forecast to actual data

TylerJVitale
Explorer

I want to forecast a time series and see how accurate the prediction model is. The forecast SPL is:

| timechart span=1d sum(VOLUME)  | predict "sum(VOLUME)" as prediction algorithm="LLP5" future_timespan="365" holdback="0" period=365 lower"95"=lower"95" upper"95"=upper"95" | forecastviz(365, 0, "sum(VOLUME)", 95)

Is there a way I can tell the algorithm to use only data from up to 6 months ago, forecast the next 6 months, and then overlay the real timechart from the past 6 months? Also if it could include the r squared and RMSE that would be fantastic.

0 Karma
Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...