Splunk Search

Data results not aligning with time

plapila
Explorer

Been experimenting with ML toolkit and having some weird issues. I can get nice predictions by teaching the data but when trying to visulize and show the data on a table I get some issues. The data and the prediction don't seem to align by time even thou the time field is same.

 

splunk_data_align.jpg

Labels (1)
Tags (2)
0 Karma
1 Solution

plapila
Explorer

I was able to correct this by using chart instead of timechart

 


@plapila wrote:

@ITWhisperer wrote:

What was the SPL you used to produce this?


index=fav  AND ACTION="Modem boot" | bin _time span=1d | timechart count by ACTION | apply Modemboot

 


index=fav AND ACTION="Modem boot"
| bin _time span=1d | chart count(ACTION) as "Modem boot" by _time span=1d cont=true | apply Modemboot

View solution in original post

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

What was the SPL you used to produce this?

0 Karma

plapila
Explorer

@ITWhisperer wrote:

What was the SPL you used to produce this?


index=fav  AND ACTION="Modem boot" | bin _time span=1d | timechart count by ACTION | apply Modemboot

 

0 Karma

plapila
Explorer

I was able to correct this by using chart instead of timechart

 


@plapila wrote:

@ITWhisperer wrote:

What was the SPL you used to produce this?


index=fav  AND ACTION="Modem boot" | bin _time span=1d | timechart count by ACTION | apply Modemboot

 


index=fav AND ACTION="Modem boot"
| bin _time span=1d | chart count(ACTION) as "Modem boot" by _time span=1d cont=true | apply Modemboot

0 Karma
Get Updates on the Splunk Community!

ATTENTION!! We’re MOVING (not really)

Hey, all! In an effort to keep this Slack workspace secure and also to make our new members' experience easy, ...

Splunk Admins: Build a Smarter Stack with These Must-See .conf25 Sessions

  Whether you're running a complex Splunk deployment or just getting your bearings as a new admin, .conf25 ...

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...