Answers for "Question about analyzefields search command"
https://answers.splunk.com/answers/8528/question-about-analyzefields-search-command.html
The latest answers for the question "Question about analyzefields search command"Answer by steveyz
https://answers.splunk.com/answering/10536/view.html
<p>cocur is the cocurrence of the field versus the classfield. Basically it is 1 if field exists in every event where classfield exists.</p>
<p>acc is the accuracy in predicting the value of the classfield using the value of the field, using a multi-class guassian maximal likelihood estimation. This is only valid for numerical fields.</p>
<p>balacc is the "balanced accuracy", which is basically just the accuracy adjusted for the distribution of values of the classfield. Basically, a non-weighted average of the accuracies in predicting each value of the classfield. Again this is only valid for numerical fields.</p>Wed, 12 Jan 2011 03:53:05 GMTsteveyz