Below is the scenario.
host=* sourcetype=abc* summary NOT ("cda" OR "fgh" )
| eval error= if(Error_Code=0, 0, 1)
| timechart values(error) as error
Above is the code where 0 represents "Success" and 1 represents "Error". I am using MLTK forecast time series assistant on that. I want predicted value to be only 0 and 1 only. But when i use forecast time series assistant the predicted values is between 0 and 1. like 0.23, 0.34, 056.
If i use predict numeric fields or predict categorical fields assistants of MLTK then those dont shows future predicted values.
It seems what i want to achieve is not possible this way. So can you suggest any other way to predict future value of error field with respect to time.
Thanks a lot 🙂
... View more