How to work with Machine Learning

[Pratiksha_Tewary]

Hi,

I am trying to work with X-Pack's Machine Learning feature. There are several resources available at the Elastic websites and beyond to learn about this tool. However, I am having trouble with making ML take in my data in the first place. I am fairly new to this, so kindly bear with me. It just gives me an error saying "Index pattern <index_pattern> is not time based". I do not understand how it is detecting whether the index is time-based or not.

For the data set that I am working with, @timestamp is not meant to be my default time-based field. I have another field called "Date", which is meant to be my time-based field. I was able to change the default for Timelion by going to Advanced Settings. However, I don't even know how to start with Machine Learning (or where to go if I want to customize parameters).

Any help will be greatly appreciated.

[dmitri (Dimitris Athanasiou)]

Hi,

The problem is that you are using an index pattern that has no time field defined. ML anomaly detection only works with time series, thus a time-based index pattern is required. You can create a new index pattern for use with ML, and this time set the "Date" field as the index pattern's time field. You can do that through the management page in Kibana. You should then be able to use ML with the newly created index pattern without issues.

Let me know if you need more help with this.

Kind regards,
Dimitris