Questions in topic: "spectrum"
https://answers.splunk.com/answers/topics/single/163208.html
The latest questions for the topic "spectrum"How to produce empty time buckets
https://answers.splunk.com/answers/149425/how-to-produce-empty-time-buckets.html
In order to perform fast Fourier transform (FFT), I need data from equal time intervals. Here is my first attempt:
` | bucket span=5m _time | stats count as COUNT by _time`
The idea is to use bins for sampling. However, this doesn't work when no events occur in some bins. Splunk will not output rows for any bin in which COUNT = 0 because _raw doesn't contain such data. Is there some way to force/coerce Splunk into producing empty time buckets?
FFT (in R app) is the most hopeful tool for spectrum analysis. Before I explore interpolation in an external tool, I'd like to see if there is a direct Splunk method. I understand that there may not be a meaningful way to fill empty buckets in general. But calendar time is defined in the system, so there should be an easy way to force it.
I looked at zero-count discussions. One post suggests a subsearch over dense data, i.e., data sets that have non-zero counts in each of desired time bucket. Whereas in my range this is possible, this appears to be a really expensive way to implement a simple calendaring function.timebucketsspectrumTue, 05 Aug 2014 23:35:35 GMTyuanliuHow to perform spectrum analysis?
https://answers.splunk.com/answers/147907/how-to-perform-spectrum-analysis.html
I do not see FFT or other Fourier transform functions. If I must use an external script, I need the output to be searchable, as a summary index or something. How do I do that?analysisrprojectspectrumTue, 29 Jul 2014 00:49:51 GMTyuanliu