Splunk Search

DBSCAN Cluster Visualization Interpretation, Machine Learning Toolkit

michaelsplunk1
Path Finder

Hi!

I used the "Cluster Behavior by App Usage"  example in the Clustering Numeric Fields workflow within the Splunk MLTK Showcase. It produces the cluster visualization shown below. Can you help me understand the meaning of this visualization or recommend resources for understanding this visualization? How do I know which fields are clustered by looking at this? I understand the coloring has something to do with it, but there are multiple plots, and I would love some help trying to understand what this means.

Thank you so much!

michaelsplunk1_0-1593459847848.png

 

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...