Splunk Enterprise

Can you please explain how to do partial fit on DensityFunction?

MG
Engager

Can you please explain how to do partial fit on DensityFunction

 I have created a lookup file for a day, say today.. it has fields src_ip, dest_ip, bytes, hod.

First created a search as below:
|inputlookup log_21.csv
| fit DensityFunction bytes by "hod" into model1 partial_fit=true


After that , i have to do partial fit for another lookup with same fields. How to do it?
|inputlookup log_22.csv

Labels (1)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...