All Apps and Add-ons

How to change the time shown in the Machine Learning Toolkit 2.0 Outliers Chart?

burwell
SplunkTrust
SplunkTrust

The new Machine Learning Toolkit numerical outliers is cool.

I can't figure out how to adjust the time shown in the outliers chart. For example if I have a search for the last 30 days and there's an outlier on Oct 11 and then 3 more on Oct 19, what I see is a chart with time going from October 5 up to October 18. I can't see any way to visualize the other outliers or compress the outlier chart.

What I can do is to open in search and then narrow the search time, but wondered if there were plans to adjust the outlier chart somehow.

0 Karma
1 Solution

sslepian_splunk
Splunk Employee
Splunk Employee

The outliers visualization is currently set to display only the first 1000 points. We're looking at addressing this in a future release. I'll update this question when that happens.

View solution in original post

sslepian_splunk
Splunk Employee
Splunk Employee

The outliers visualization is currently set to display only the first 1000 points. We're looking at addressing this in a future release. I'll update this question when that happens.

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...