Splunk Search

Why is the predict command projecting past dates in the future?

ajtalbot1
Engager

What I thought was going to be a simple search:

lucy
| eval UsedT=UsedMB/1024/1024 
| eval UsedTB=round(UsedT,1) 
| timechart avg(UsedTB) as TBUsed span=1w 
| predict TBUsed

But my graph is showing the current data, up to today (March 28th), then jumping back to February 1st.alt text
Any ideas?

0 Karma

ajtalbot1
Engager

Root cause was found. Turns out everything gets screwed up if there is missing data. In this case my data set was only about 90 days, and I was search for 120 days. The null data at the beginning screwed everything up.

0 Karma

DalJeanis
Legend

Please accept your answer so that the question will show as complete.

0 Karma

gfreitas
Builder

Odd.. could you post also the results table?

0 Karma
Get Updates on the Splunk Community!

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...

New! Splunk Observability Search Enhancements for Splunk APM Services/Traces and ...

Regardless of where you are in Splunk Observability, you can search for relevant APM targets including service ...

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...