Hi I have the following query for training a model. However, I want to save my model name using a single column value that comes from a lookup. In a nutshell, I want to save the model name d...
...ave tried with make all the dashboard run a base search and then post process the results on each panel, this did'nt reduce the duration.
So, what you recommend, use a saved search, a summary index o...
I have a saved search that does:
| from datamodel:"Performance.Storage"
But, I am trying to make this saved search parameterized using:
| from datamodel:"$model...
As title, I am using Splunk Machine Learning Toolkit now.
I'm confused about whether I could save the result of predicting.
In my opinion, I might save the result into my raw data. That's e...
Apologies if I've missed something obvious,
assuming I don't use parameterized saved searches, what benefits are there using saved searches over data models? i.e. in what circumstances would I u...
We installed splunk_app_aws with default setting. The next day ALL the savedsearches were on the Skipped Search report because they were running as "nobody" and needed updated search quotas.
We c...
Dear Experts: I'm new to Splunk. I have a search output device lists with events number greater than 20 as a report, for example, event_date src  ...
I need to get timecharts of more than 100 fields from an index and save them back to splunk. And I need to update these timecharts regularly (say per week). I can find a good way to do it.
btw C...
...re multiples of:
datamodels
indexes
inputs
models
props
views
do these need to be changed as well? if so, i assume the same process as the saved searches, edit the local.meta ,then h...