Dashboards & Visualizations

What is the definition of this DensityFunction macro so I can create it or do I need to download this macro?

POR160893
Builder

Hi,

I am creating a dashboard where I need to use the density function to show anomalies as follows:
| tstats count as total where index=dns by _time span=1h
| fit DensityFunction total dist=norm show_density=true
| bin total bins=100
| stats count avg("ProbabilityDensity(total)") as pd by total

However, when using the ProbabilityDensity function within the machine learning app in Splunk, no results are outputted.

In addition, I see no Probability Density macros "out-of-the-box" within the Machine Learning app either.


What is the definition of this DensityFunction macro so I can create it or do I need to download this macro?

 

Many thanks,

Labels (4)
0 Karma

tscroggins
Influencer

Hi,

Is Splunk Machine Learning Toolkit correctly installed? $SPLUNK_HOME/etc/apps/Splunk_ML_Toolkit/bin/algos/DensityFunction.py should be present.

Are you receiving any errors or warnings after the fit command?

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...