Splunk® Machine Learning Toolkit

User Guide

Splunk Machine Learning Toolkit version dependencies

The Splunk Machine Learning Toolkit (MLTK) releases updates on a regular schedule. Keep your instance of MLTK and affiliated add-ons up-to-date to access the latest features.

About the PSC add-on

The Splunk Machine Learning Toolkit relies on the Python for Scientific Computing (PSC) add-on. Install or upgrade to a compatible version of the PSC add-on based on your operating system:

If you have any custom algorithms that rely on the PSC libraries, upgrading the PSC add-on impacts those algorithms. You must re-train any models (re-run the search that used the fit command) using those algorithms after you upgrade PSC.

On some Windows operating systems, installing PSC through the Splunk Manage Apps user interface results in an error. This error is usually benign and you can ignore it. In some cases, you might need to manually unpack the package in the apps directory to get past the error.


Version matrix

See the following table for the compatible combinations of MLTK, the PSC add-on, Python, and the Splunk platform:

MLTK version PSC add-on version Python version Splunk platform version Notes
5.5.0 3.2.2 or 4.2.2 3.9 Splunk Enterprise 8.2.x, 9.0.x, 9.1.x, or 9.2.x,

or Splunk Cloud Platform

These PSC versions include an updated version of OpenSSL to address a security vulnerability.
5.4.2 4.2.1 3 Splunk Enterprise 8.2.x, 9.0.x, 9.1.x, or 9.2.x,

or Splunk Cloud Platform

Upgrading to MLTK 5.4.2 might require model retraining. See, Upgrade the Splunk Machine Learning Toolkit.

PSC version 4.2.1 is a minor release that offers additional packages.

3.2.1 3 Splunk Enterprise 8.2.x, 9.0.x, 9.1.x, or 9.2.x,

or Splunk Cloud Platform

Upgrading to MLTK 5.4.2 might require model retraining. See, Upgrade the Splunk Machine Learning Toolkit.

PSC version 3.2.1 is a minor release that offers additional packages.

5.4.1 4.1.2 or 4.2.0 3 Splunk Enterprise 9.2.x

or Splunk Cloud Platform

PSC version 4.2.0 is a minor release that offers additional packages.
3.1.0, 3.2.0, 4.1.0, 4.1.2, or 4.2.0 3 Splunk Enterprise 8.1.x, 8.2.x, 9.0.0, 9.0.1, 9.0.5, or 9.1.0

or Splunk Cloud Platform

PSC version 4.2.0 is a minor release that offers additional packages.
5.4.0 4.1.2 3 Splunk Enterprise 9.2.x

or Splunk Cloud Platform

Version 3.1.0, 4.1.0, or 4.1.2 of the PSC add-on is required to use the upload ONNX models feature.
3.1.0, 4.1.0, or 4.1.2 3 Splunk Enterprise 8.2.x, 9.0.0, 9.0.1, 9.0.5, or 9.1.0

or Splunk Cloud Platform

Version 3.1.0, 4.1.0, or 4.1.2 of the PSC add-on is required to use the upload ONNX models feature.
5.3.3 3.0.2, 3.1.0, 4.0.0, 4.1.0, or 4.1.2 3 Splunk Enterprise 8.1.x, 8.2.x, or 9.0.0

or Splunk Cloud Platform

Version 4.0.0 of the PSC add-on requires additional installation steps. See, Install version 4.0.0 of the PSC add-on.

Deprecated support of Internet Explorer.

5.3.1 3.0.0, 3.0.1, or 3.0.2 3 Splunk Enterprise 8.0.x, 8.1.x, 8.2.x, or 9.0.0

or Splunk Cloud Platform

Version 3.0.2 of the PSC add-on is limited to bug fixes.
5.3.0 3.0.0, 3.0.1, or 3.0.2 3 Splunk Enterprise 8.0.x, 8.1.x, 8.2.x, or 9.0.0

or Splunk Cloud Platform

This version of MLTK requires version 3.0.0, 3.0.1, or 3.0.2 of the PSC add-on. Users upgrading to this version must retrain models created in earlier versions of MLTK.
5.2.2 2.0.0, 2.0.1, or 2.0.2 3 Splunk Enterprise 8.0.x, 8.1.x, or 8.2.0

or Splunk Cloud Platform

This version of MLTK is limited to a minor enhancement.
5.2.1 2.0.0, 2.0.1, or 2.0.2 3 Splunk Enterprise 8.0.x, 8.1.x, or 8.2.0

or Splunk Cloud Platform

This version of MLTK is limited to a minor enhancement.
5.2.0 2.0.0, 2.0.1, or 2.0.2 3 Splunk Enterprise 8.0.x, 8.1.x, or 8.2.0

or Splunk Cloud Platform

This version of MLTK is available with Splunk Enterprise version 8.0.x, 8.1.x, or 8.2.0.
5.1.0 2.0.0, 2.0.1, or 2.0.2 3 Splunk Enterprise 8.0.x or 8.1.x

or Splunk Cloud Platform

This version of MLTK is available with Splunk Enterprise version 8.0.x or 8.1.x.
5.0.0 2.0.0, 2.0.1, or 2.0.2 3 Splunk Enterprise 8.0.x or 8.1.x

or Splunk Cloud Platform

This version of MLTK is only available with Splunk Enterprise version 8.0.x or 8.1.x. Users upgrading to this version must retrain models created in earlier versions of MLTK. The file extension for models has changed from .csv to .mlmodel.
Last modified on 16 October, 2024
Upgrade the Splunk Machine Learning Toolkit   Preparing your data for machine learning

This documentation applies to the following versions of Splunk® Machine Learning Toolkit: 5.5.0


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters