Splunk Search

How do I predict the monthly data using predict command in splunk?

saranravi
New Member

Sample Data;
Month Year X1
5 2015 220
6 2015 210

7 2015 225

Output

Predicted results:

Month year x1
8 2015 220
9 2015 223.4

I have three years of data. any suggestion would be helpful.

Tags (1)
0 Karma

Sukisen1981
Champion

Hi,
I am assuming you had a look at the predict command documentation - https://docs.splunk.com/Documentation/Splunk/7.1.1/SearchReference/Predict

Now, you need to try the various algorithm options as mentioned in the table. If your data is seasonal / periodic etc. , your algorithm option should be based on that. I suggest starting with LLP5 and LLP first.
2 key points to remember
1-Please specify a holdback period, this will allow you to see how accurate your predictions are. from the document above - holdback
Syntax: holdback=
Description: Specifies the number of data points from the end that are not to be used by the predict command. Use in conjunction with the future_timespan argument. For example, 'holdback=10 future_timespan=10' computes the predicted values for the last 10 values in the data set. You can then judge how accurate the predictions are by checking whether the actual data point values fall into the predicted confidence intervals.
Default: 0
2-Remember , your data must have some underlying pattern for a algorithm to be successful. Try out the algorithm options with holdback and one of them should fit your use case,

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...