How to compare forecast to actual data

Dashboards & Visualizations

I want to forecast a time series and see how accurate the prediction model is. The forecast SPL is:

| timechart span=1d sum(VOLUME)  | predict "sum(VOLUME)" as prediction algorithm="LLP5" future_timespan="365" holdback="0" period=365 lower"95"=lower"95" upper"95"=upper"95" | forecastviz(365, 0, "sum(VOLUME)", 95)

Is there a way I can tell the algorithm to use only data from up to 6 months ago, forecast the next 6 months, and then overlay the real timechart from the past 6 months? Also if it could include the r squared and RMSE that would be fantastic.

Get Updates on the Splunk Community!

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...