Splunk® Machine Learning Toolkit


Acrobat logo Download manual as PDF

This documentation does not apply to the most recent version of MLApp. Click here for the latest version.
Acrobat logo Download topic as PDF

Running process and method calling convention

There are a few parts of the logic that you need to be familiar with.

Fit command

In the fit command, when partial_fit=f (default), first the algorithm's fit method is called. If it returns a DataFrame, we return that to the search. If it doesn't, we will call apply later, then return whatever DataFrame apply gives us.

Fit diagram.png

Fit command partial_fit=t

In the fitcommand, when partial_fit=t, the algorithm's partial_fit method is called on each chunk of 50,000 events. Then apply is called on those events. We continue this process until we run out of data.

Partial fit.png

Apply Command

In the apply command, things are much simpler. We reconstruct the python object by using its codec, then call apply on the events, chunk by chunk.


Summary Command

In the summary command, things are similar to apply. We reconstruct the python object by using its codec, then call summary.


Last modified on 03 July, 2019
Write an algorithm class
Saving models

This documentation applies to the following versions of Splunk® Machine Learning Toolkit: 2.3.0, 2.4.0, 3.0.0, 3.1.0, 3.2.0, 3.3.0, 3.4.0, 4.0.0, 4.1.0, 4.2.0, 4.3.0

Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters