Using Splunk

As we mentioned earlier in this chapter, Splunk proposes a three-tier architecture for implementing machine learning solutions, defined as:

• Tier 1: Core platform searching features
• Tier 2: Packaged solutions and apps offered on Splunkbase
• Tier 3: Using the Splunk Machine Learning Toolkit

Since we are focusing on the Splunk Machine Learning Toolkit in this chapter, we can skip going over the first two tiers and jump right into tier 3, using the toolkit.