Splunk Search

Splunk ML app not looking at the entire data

shrivallabhd
New Member

Hi,

We are evaluating Splunk for our ML use case. We are using "Free splunk" at this point of time for the evaluation.

We have ingested around 35 million events.

We want to run the ML model against all of the events.

However, the search results on ML page show that there are only 500k events considered.

What could be the reason? Could it be related to licensing? There is no clear indication stating the same.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...