Entries by Urwah Haq

Interesting Splunk MLTK Features for Machine Learning (ML) Development

The Splunk Machine Learning Toolkit is packed with machine learning algorithms, new visualizations, web assistant and much more. This blog sheds light on some features and commands in Splunk Machine Learning Toolkit (MLTK) or Core Splunk Enterprise that are lesser known and will assist you in various steps of your model creation or development. With […]

Quick Guide to Outlier Detection in Splunk

There are multiple (almost discretely infinite) methods of outlier detection. In this blog I will highlight a few common and simple methods that do not require Splunk MLTK (Machine Learning Toolkit) and discuss visuals (that require the MLTK) that will complement  presentation of outliers in any scenario.  This blog will cover the widely accepted method […]

Predict Spam Using Machine Learning Classification

­­In this blog we will use a classification approach for predicting Spam messages. A classification approach categorizes your observations/events in discrete groups which explain the relationship between explanatory and dependent variables which are your field(s) to predict. Some examples of where you can apply classification in business projects are: categorizing claims to identify fraudulent behaviour,  […]

Diving into Splunk Table Datasets

Splunk’s Table Datasets feature was first introduced in version 6.5. It added the ability to manipulate data in a tabular form for users who are unfamiliar with Splunk Search Processing Language (SPL). Users can generate reports, tables and pivot models to extract operational knowledge from their data.

Homepage for Splunk – Our New App!

Homepage for Splunk We are pleased to announce the release of our new app, Homepage for Splunk. This Splunk certified app presents your logged in users with a ‘virtual cockpit’ that provides a single-pane-of-glass view into their specific use of Splunk. 

Splunk Enterprise 6.6 New Features – Part III

We continue to explore the new features of Splunk 6.6. In part I and part II we talked about the new Knowledge Object management feature and the Search Editor enhancements. In this post, we will discuss the introduction of the new Search Head Cluster (SHC) graphical user interface and Indexer Clustering improvements in Splunk 6.6.