I have volumes that are ingested into Splunk for the past 6 months
Need to predict the volumes for the following period
-1 month
- 15 days
- 7 days
- 1 day
- 1 hour
I tried using the timechart with varying span (1h / 1d / 7d / 1w / 15d / 1mon) and the predict command.
The volumes were accurate enough for monthly prediction; but for weekly, daily, and hourly predictions, the values varied too much and the values were totally wrong.
for ex. I don't have any volumes at 00, 01, 02, and 03 hour on any particular day, but the predicted volume using the search:
index ...... | timechart span=1h Actual | predict Actual algorithm=LLP5
shows values at these hours. Not sure what I am doing wrong here
Can someone help me on this?
... View more