I would like to add an outliers' chart from the Machine learning visualizations to my splunk dashboard. The visualization itself is not available in the dashboard studio, and I can't find any documentations for it. Running my query in the search tab works fine because it detects what visualization i want to use automatically. My query:
index=xxx sourceServiceName="xxx" cn1="xxx"
| bucket _time span=1h
| stats count by _time
| sort - count
| eventstats median("count") as median
| eval absDev=(abs('count'-median))
| eventstats median(absDev) as medianAbsDev
| eval lowerBound=(median-medianAbsDev*exact(8)), upperBound=(median+medianAbsDev*exact(8))
| eval isOutlier=if('count' < lowerBound OR 'count' > upperBound, 1, 0)
| fields _time, "count", lowerBound, upperBound, isOutlier, *
I tried replacing fields with "table" but wouldn't fix it. Any help is appreciated.
... View more