Splunk® Machine Learning Toolkit

User Guide

Acrobat logo Download manual as PDF

This documentation does not apply to the most recent version of Splunk® Machine Learning Toolkit. For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

Known issues

The following are known issues in the Splunk Machine Learning Toolkit version 5.4.0. If no known issues are listed, no issues have been reported.

Date filed Issue number Description
2023-08-02 MLA-4650 Error in apply command on simple xml dashboard when input is changed
2023-07-26 MLA-4646 model replication fix for IDXs for non-admin users
2023-04-05 MLA-4564 Post upgrade from ES 6.1.1 to 7.0.2 has caused savedsearch with MLTK macro is returning a lot of false positives notables created

The model is fine and it is likely that the outburst of notables were due to a true positive. However, if the customer determines that it is still a false positive, they may want to consider lowering the sensitivity.
2023-03-23 MLA-4531 Onnx model upload errors out on models that are not encoded properly
2023-02-21 MLA-4451 "Converting {} field(s) with categorical values into categorical fields" warning message should be logged discreetly and not appearing in UI/dashboard.

No workaround available.
2023-02-06 MLA-4442 Correlation searches using/generating __mlspl_failures_by_src_count_1h model is recording excessive amount of btool logs
2022-08-24 MLA-4320 Experiments' Search bar does not work with map command when used with $$ such as date_hour=$hour$

Run your SPL in the regular Search bar. If you want to see SODA outlier visualizations, add show_density=true show_options="feature_variables,split_by,params" to your SPL and select Distribution Plot from the Visualization tab.
2022-07-20 MLA-4303 Singular Matrix error in StateSpaceForecast Algo
2022-07-03 MLA-4298, MLA-4160 'apply' search processor too aggressive in throwing exceptions
2022-06-23 MLA-4296 Investigate the root cause of Experiments page showing blank with "Loading failed"
2022-01-10 MLA-4234 Deleting an alert after creating it does not work

Go to the list of alerts and delete your alert from there.
2021-11-25 MLA-4178 Experiment Alert search not created correctly from Assistant

Manually adjust the created search in savedsearches.conf or through the UI. Use the SPL created by the assistants a start.
2021-07-09 MLA-4026 What-If Analysis does not properly display on some Unix platforms
2020-08-03 MLA-3950 Apply command does not run if used from a sub search

command to append the column that will be returned from the subsearch to the savedsearch's columns, instead of assigning its value to a non-existing column in the savedsearch. Example:
| inputlookup track_day.csv
| fit LogisticRegression fit_intercept=true "vehicleType" from "batteryVoltage" "engineCoolantTemperature" "engineSpeed" "lateralGForce" "longitudeGForce" "speed" "verticalGForce" into "example_vehicle_type"
makeresults count=50000
save as
|savedsearch MLA3950 | appendcols \[| inputlookup track_day.csv | apply "example_vehicle_type" | table vehicleType]
This will append the
column from the
to the
2019-12-17 MLA-3701 Search bars in Assistants will not display more than approximately 500k rows

This is mostly a visual issue - the actual number of results the Assistant will use when fitting a model is not affected.
2019-12-11 MLA-3686 MLTK Assistants do not support quote characters in field names

Use the "rename" or "eval" command to rename the field prior to using it.
2019-10-09 MLA-3559 Loading settings from experiment history while in the Learn stage will lead to warnings, even when inputs are correct
2019-08-30 MLA-3423 Add a warning message when kfold_cv is set to number greater than half of the datasize
2019-07-12 MLA-3237 Anova table does not allow some special characters in formula so in field names also

Rename your field names before running "score anova" if they include one or more of those special characters:




2019-03-28 MLA-2965 "Edit Job Settings" does not work in Assistants
2018-09-24 MLA-2547 Experiments can't be renamed until they have been filled and saved

Load the Experiment, fill all necessary fields, and save it. You'll be able to rename the Experiment in the Save dialog.
2018-06-12 MLA-2258 TFIDF returns a vague error message when the "token_pattern" parameter is invalid
2017-08-25 MLA-1916 Uncaught StatsModels error with ARIMA order=0-2-0
2017-02-28 MLA-1670 "Outliers Over Time" plot doesn't display any data if the _time field does not contain a Unix timestamp.
2016-12-13 MLA-1485 In the Forecast Time Series assistant, forecasting a very large number of points may cause the browser to crash.
Last modified on 13 October, 2023
What's new
Fixed issues

This documentation applies to the following versions of Splunk® Machine Learning Toolkit: 5.4.0

Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters