I'm not sure why you're unable to apply the _exp... model - I would guess that there's Splunk permissions issue. Are you trying to apply it from another user or app? Experiment models are scoped to the user/app that created them. The _exp... prefix tells you that this model is controlled by the Experiment - any alerts created from the Experiment will use this model, scheduled training will overwrite this model, etc. If you'd like to use this model outside an Experiment, the recommended approach is using the "Publish" function, which will clone the Experiment's models to a location of your choice (and allows you to specify a different name). Note that this is a one-time action - it'll export the current state of your model, but if your model changes you would need to Publish again. Experiments don't support partial fit at this time - you would need to use the "fit" command on the search page to do that. ... View more

The latest version of the Machine Learning Toolkit (3.4.0) should resolve this issue. ... View more

There's no built-in way to keep track of multiple data streams at the same time with the "Detect Numeric Outliers" assistant as it ships with the app, but it's possible using the building blocks provided by the MLTK. For example, if you would like to receive alerts when a data stream has outliers, you could individually run each stream of data through the "Detect Numeric Outliers" assistant and set up an an alert for it, which would then notify you about outliers on that stream in the fashion of your choosing. You can likewise use the "Outliers Chart" custom visualization to set up a custom dashboard for monitoring multiple streams of data. ... View more