Known issues

The following are known issues in the Splunk Machine Learning Toolkit version 5.3.3. If no known issues are listed, no issues have been reported.

Date filed	Issue number	Description
2023-04-05	MLA-4564	Post upgrade from ES 6.1.1 to 7.0.2 has caused savedsearch with MLTK macro is returning a lot of false positives notables created Workaround: The model is fine and it is likely that the outburst of notables were due to a true positive. However, if the customer determines that it is still a false positive, they may want to consider lowering the sensitivity.
2023-02-21	MLA-4451	"Converting {} field(s) with categorical values into categorical fields" warning message should be logged discreetly and not appearing in UI/dashboard. Workaround: No workaround available.
2023-02-06	MLA-4442	Correlation searches using/generating __mlspl_failures_by_src_count_1h model is recording excessive amount of btool logs
2022-09-06	MLA-4325	.mlmodel Replication Deny List
2022-08-24	MLA-4320	Experiments' Search bar does not work with map command when used with $$ such as date_hour=$hour$ Workaround: Run your SPL in the regular Search bar. If you want to see SODA outlier visualizations, add show_density=true show_options="feature_variables,split_by,params" to your SPL and select Distribution Plot from the Visualization tab.
2022-08-04	MLA-4310	Fix MLTK logging in mlspl.log (too-small).
2022-07-20	MLA-4303	Singular Matrix error in StateSpaceForecast Algo
2022-07-03	MLA-4298, MLA-4160	'apply' search processor too aggressive in throwing exceptions
2022-06-23	MLA-4296	Investigate the root cause of Experiments page showing blank with "Loading failed"
2022-01-10	MLA-4234	Deleting an alert after creating it does not work Workaround: Go to the list of alerts and delete your alert from there.
2021-11-25	MLA-4178	Experiment Alert search not created correctly from Assistant Workaround: Manually adjust the created search in savedsearches.conf or through the UI. Use the SPL created by the assistants a start.
2021-07-09	MLA-4026	What-If Analysis does not properly display on some Unix platforms
2020-08-03	MLA-3950	Apply command does not run if used from a sub search Workaround: Use appendcols command to append the column that will be returned from the subsearch to the savedsearch's columns, instead of assigning its value to a non-existing column in the savedsearch. Example: | inputlookup track_day.csv | fit LogisticRegression fit_intercept=true "vehicleType" from "batteryVoltage" "engineCoolantTemperature" "engineSpeed" "lateralGForce" "longitudeGForce" "speed" "verticalGForce" into "example_vehicle_type" makeresults count=50000 save as MLA3950 |savedsearch MLA3950 | appendcols \[| inputlookup track_day.csv | apply "example_vehicle_type" | table vehicleType] This will append the vehicleType column from the subsearch to the savedsearch columns.
2019-12-17	MLA-3701	Search bars in Assistants will not display more than approximately 500k rows Workaround: This is mostly a visual issue - the actual number of results the Assistant will use when fitting a model is not affected.
2019-12-11	MLA-3686	MLTK Assistants do not support quote characters in field names Workaround: Use the "rename" or "eval" command to rename the field prior to using it.
2019-10-09	MLA-3559	Loading settings from experiment history while in the Learn stage will lead to warnings, even when inputs are correct
2019-08-30	MLA-3423	Add a warning message when kfold_cv is set to number greater than half of the datasize
2019-07-12	MLA-3237	Anova table does not allow some special characters in formula so in field names also Workaround: Rename your field names before running "score anova" if they include one or more of those special characters:  (r'[&%$#@!`\|";<>^]')
2019-03-28	MLA-2965	"Edit Job Settings" does not work in Assistants
2018-09-24	MLA-2547	Experiments can't be renamed until they have been filled and saved Workaround: Load the Experiment, fill all necessary fields, and save it. You'll be able to rename the Experiment in the Save dialog.
2018-06-12	MLA-2258	TFIDF returns a vague error message when the "token_pattern" parameter is invalid
2017-08-25	MLA-1916	Uncaught StatsModels error with ARIMA order=0-2-0
2017-02-28	MLA-1670	"Outliers Over Time" plot doesn't display any data if the _time field does not contain a Unix timestamp.
2016-12-13	MLA-1485	In the Forecast Time Series assistant, forecasting a very large number of points may cause the browser to crash.