Splunk Dev

How to use Splunk MachineLearning Toolkit

ibmresilient
Path Finder

I am using Splunk Enterprise 6.6.2 ( >6.4 required by Splunk MachineLearning Toolkit). And just installed the latest Splunk MachineLearning Toolkit and Python for Scientific Computing from splunkbase. Server restarted.

Then I want to try one of the showcase from the Showcase tap, named "Detect Outliers in Number of Logins(vs. Predicted Value)".

But I was unable to run the search. It shows "Could not create search. (Service unavailable)."

Did I miss anything here?

Thanks!

Tags (1)
0 Karma
1 Solution

ibmresilient
Path Finder

Ok, I am going to answer my own question. This is caused by inadequate free hard drive space.

I saw the error message complaining about only 500MB free space left. So increasing the hard drive space fixed the problem.

View solution in original post

0 Karma

ibmresilient
Path Finder

Ok, I am going to answer my own question. This is caused by inadequate free hard drive space.

I saw the error message complaining about only 500MB free space left. So increasing the hard drive space fixed the problem.

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...