Activity Feed
- Posted Re: anqRe: Subquery in an else statement on Splunk Search. 11-18-2020 03:01 AM
- Posted anqRe: Subquery in an else statement on Splunk Search. 11-17-2020 07:17 AM
- Tagged Subquery in an else statement on Splunk Search. 11-17-2020 05:41 AM
- Posted Subquery in an else statement on Splunk Search. 11-17-2020 05:39 AM
- Karma Re: How to Access Jupyter notebook in Deep learning toolkit ? for pdrieger_splunk. 06-05-2020 12:51 AM
- Posted Re: How to Access Jupyter notebook in Deep learning toolkit ? on All Apps and Add-ons. 05-13-2020 10:31 AM
- Posted How to Access Jupyter notebook in Deep learning toolkit ? on All Apps and Add-ons. 05-13-2020 10:06 AM
- Tagged How to Access Jupyter notebook in Deep learning toolkit ? on All Apps and Add-ons. 05-13-2020 10:06 AM
- Tagged How to Access Jupyter notebook in Deep learning toolkit ? on All Apps and Add-ons. 05-13-2020 10:06 AM
Topics I've Started
Subject | Karma | Author | Latest Post |
---|---|---|---|
0 | |||
0 |
11-18-2020
03:01 AM
I finally made it to work, first it was the evals made before the join occurs and then it was multiple if statement that needed to be checked. Bellow the code if that might someday help anyone and thank you for your replies richgalloway |inputlookup model_evaluation.csv | rename evaluation_metric as training_score | table model_name training_score
| join type=inner model_name
[|inputlookup model_evaluation_month.csv]
| eventstats max(training_score) as max_training
| eventstats max(evaluation_metric) as max_evaluation
| eval model_max_evaluation = if(tonumber(evaluation_metric) == tonumber(max_evaluation), model_name, "void")
| eval good_model_name = if(training_score == max_training and evaluation_metric >= 0.94, model_name, model_max_evaluation)
| dedup good_model_name
| where like(training_score, "%".max_training."%") OR NOT like(good_model_name, "void")
| eventstats count(model_name) as count_lines
| eval model_to_keep = if(count_lines > 1, if(training_score == max_training and evaluation_metric >= 0.94, "True", "False"), "None")
| search model_to_keep IN ("True", "None")
| table model_name
... View more
11-17-2020
07:17 AM
Thanks for your quick reply and thanks for the return tip...I'm a SPLUNK beginner. Well it seems though to not be working. It's because I lose the row that I want to get in the else statement since it has a different model_name and it is lost with the join.
... View more
11-17-2020
05:39 AM
Hello, I trying to perform a subquery on an else statement, I believe that the way I'm trying to do it is not right. I searched a bit over the internet but I couldn't find a way of doing it. My problem is as follows, I have two inputlookups, I want to: Read from first lookup extract a value name associated to a maximum in another column (done) Join over that column (model_name) with the second inputlookup and check whether evaluation metric is superiror to a given treshold keep the model_name. (done) Else query the second inputlookup to find model_name associated with maximum value. (my problem is here...how to write a subquery in an else statement) Here's a not working code in the else statement: |inputlookup model_evaluation.csv
| eventstats max(evaluation_metric) as maxf
| eval maxf=tonumber(maxf)
| eval evaluation_metric=tonumber(evaluation_metric)
| where evaluation_metric>=maxf
| dedup maxf
| rename evaluation_metric as training_score
| table model_name training_score
| join type=inner model_name
[|inputlookup model_evaluation_month.csv
| eval good_model_name = case (evaluation_metric > 0.95, model_name, 1=1, [search | eventstats max(evaluation_metric) as maxf | eval maxf=tonumber(maxf) | eval evaluation_metric=tonumber(evaluation_metric) | where evaluation_metric>=maxf |dedup maxf | return model_name])
| table *, good_model_name
] Thank you in advance !
... View more
- Tags:
- machine learning
05-13-2020
10:31 AM
Thank you so much !
... View more
05-13-2020
10:06 AM
Hello good people,
I have installed the Deep learning Toolkit in Splunk and pulled the MLTK image in my standalone setup. Everything seems to be configured well, but when I hit the Jupyterlab in the containers tab, I am prompted to provide a password. The thing is I didn't setup any password.
Have you encountered the same issue ?
... View more