Splunk Search

Hello experts, I would like to calculate the pearson correlation between all my fields ?

faisal_alazem
New Member

I visited the documentation and I see that we can only compute the pearson correlation between two fields at a time with command |score pearsonr field_a against field_b . How can I computer the pearson correlation between all the fields in my data ? Assuming I have a dataset with 5 columns, my output should give me 32 pairs of pearson correlations.

In a programming language this can be easily coded with a double for loop. I am wondering how to do this in splunk.

Thank you

Tags (2)
0 Karma

jraso
Explorer

Hi Faisal,

I managed to do that yesterday following these steps from the MLTK documentation:

https://docs.splunk.com/Documentation/MLApp/5.1.0/API/CorrelationMatrix

Hope it helps!

0 Karma
Get Updates on the Splunk Community!

Unlock New Opportunities with Splunk Education: Explore Our Latest Courses!

At Splunk Education, we’re dedicated to providing top-tier learning experiences that cater to every skill ...

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...