Splunk Search

Could I save the predicted value after using ML model?

rickyhsu7
Explorer

As title, I am using Splunk Machine Learning Toolkit now.
I'm confused about whether I could save the result of predicting.
In my opinion, I might save the result into my raw data. That's exactly what I want to do.
Besides, could I make predictions while uploading raw data?
Thank you.

skoelpin
SplunkTrust
SplunkTrust

Are you wanting to save the metrics? Why not just apply the model each time you want to use it?

0 Karma

rickyhsu7
Explorer

Well... I want to monitor a folder, and I want to predict some value by an existing model when the data in the folder is uploaded to Splunk.

0 Karma

skoelpin
SplunkTrust
SplunkTrust

What? This makes zero sense.

What exactly are you trying to predict? Are you trying to forecast or predict? What type of algorithm are you using? Once again, why not just apply the model rather than saving the results?

0 Karma

rickyhsu7
Explorer

In my opinion, I might find the solution of the issue.
Since I want to alert user that there are something wrong after predicting, the immediate predicting is necessary. Thank you for your advice.

0 Karma

rickyhsu7
Explorer

Immediately

0 Karma

jkat54
SplunkTrust
SplunkTrust

Would the “collect” command suffice? Aka summary indexing?

http://docs.splunk.com/Documentation/Splunk/7.2.0/SearchReference/Collect

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...