icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.
Log4Shell Vulnerability: Information and guidance for you. Get resources.

Accept License Agreements

Thank You

Downloading Splunk Machine Learning Toolkit
SHA256 checksum (splunk-machine-learning-toolkit_531.tgz) 5726191cb1e43144e700d109dbb8736976c1a4926d4b86189d781bca56901a8b SHA256 checksum (splunk-machine-learning-toolkit_530.tgz) 94b9149f0391b34a8ed6e2890341e57c79070b93244b8c33ac7ec7fed4a9f753 SHA256 checksum (splunk-machine-learning-toolkit_522.tgz) 35f92672f4b31c5980d64e7d9fe513762552de46a26ba642875624dca9d4eaab SHA256 checksum (splunk-machine-learning-toolkit_521.tgz) 0699cb3c9923192d0c4fe7a00ac07a2004dd70e6ac7c5d8316d1808d943d6f65 SHA256 checksum (splunk-machine-learning-toolkit_520.tgz) 938a814c3f5cbcde83508d0f2ea0d8011bb607a7fdd0b0fda636d4ebafd7de64 SHA256 checksum (splunk-machine-learning-toolkit_510.tgz) 21c4a632ad01213896e769ffb7befc8ab23f8890c3808ef20f36f90dd5713411 SHA256 checksum (splunk-machine-learning-toolkit_450.tgz) 221ca3777324671544c64f607fe19bb8af421d77829cff46e74f79561838694c SHA256 checksum (splunk-machine-learning-toolkit_500.tgz) 77a6c3908ff7cbcd256037467797e115875b0d8f5059d11d19f2fca2eef9ab5f SHA256 checksum (splunk-machine-learning-toolkit_442.tgz) bc5a9811421c80681ab34a2e14ac104ca9bd818f476dc1023577ae37094899f9 SHA256 checksum (splunk-machine-learning-toolkit_441.tgz) 301daea835b2c74303a28e724109c70b10220711b58cac5ed16899a6ee066e8f SHA256 checksum (splunk-machine-learning-toolkit_430.tgz) eeb67083c5e7d29ea31ef8452844561734fedf9f914e6ca23028fb6ec6c51b2c SHA256 checksum (splunk-machine-learning-toolkit_420.tgz) f8e57220dfe9c0390a088f213da22afeaaea018a37fccdc82d670f2251ca32fd SHA256 checksum (splunk-machine-learning-toolkit_410.tgz) a6ba6e1921cf1f95667c67f90dadf4fa6df77f7fe2b45e9a7b7d305804f131d8 SHA256 checksum (splunk-machine-learning-toolkit_400.tgz) 73457a4106096037277169d40031e49320b9bcec1d86fb537a491a9ccb7daf7d SHA256 checksum (splunk-machine-learning-toolkit_340.tgz) 37e7dff429fc6c4dde8da030f47d711385090d45664bf35296103080e4735e48 SHA256 checksum (splunk-machine-learning-toolkit_330.tgz) 0d6f34222b67ad86bb2595e47b67b4433df0d9d048047f8d068193ce89bbae12 SHA256 checksum (splunk-machine-learning-toolkit_320.tgz) c08434514a5187dcbfe4ba5c0834f4199779e126e036ca3bad1398c6dbc4f200
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate


Splunk Machine Learning Toolkit

Splunk Cloud
Splunk Built
Splunk Machine Learning Toolkit

The Splunk Machine Learning Toolkit App delivers new SPL commands, custom visualizations, assistants, and examples to explore a variety of ml concepts.

Each assistant includes end-to-end examples with datasets, plus the ability to apply the visualizations and SPL commands to your own data. You can inspect the assistant panels and underlying code to see how it all works.

ML Youtube Playlist http://tiny.cc/splunkmlvideos
ML Cheat Sheet http://tiny.cc/mltkcheatsheet

* Predict Numeric Fields (Linear Regression): e.g. predict median house values.
* Predict Categorical Fields (Logistic Regression): e.g. predict customer churn.
* Detect Numeric Outliers (distribution statistics): e.g. detect outliers in IT Ops data.
* Detect Categorical Outliers (probabilistic measures): e.g. detect outliers in diabetes patient records.
* Forecast Time Series: e.g. forecast data center growth and capacity planning.
* Cluster Numeric Events: e.g. Cluster Hard Drives by SMART Metrics

Smart Assistants (new assistants with revamped UI and better ml pipeline/experiment management):
*Smart Forecasting Assistant (provides enhanced time-series analysis for users with little to no SPL knowledge and leverages the StateSpaceForecasting algorithm): e.g. forecasting app logons with special days

Available on both on-premise and cloud.

Deep Learning Toolkit for Splunk
Integrate with advanced custom machine learning systems using the Deep Learning Toolkit for Splunk (https://splunkbase.splunk.com/app/4607/). It extends Splunk’s Machine Learning Toolkit with prebuilt Docker containers for TensorFlow 2.0, PyTorch and a collection of NLP libraries. Python expertise is required to create your own neural networks.
Available only for on-premise customers.

Splunk Community for MLTK Algorithms on GitHub
Check out our Open Source community on Github that lets you share your algorithms with the community of Splunk MLTK users or import one of the algorithms that have been shared by the community: https://github.com/splunk/mltk-algo-contrib

The GitHub repo algorithms are also available as an app which provides access to custom algorithms. Cloud customers can use GitHub algorithms via this app and need to create a support ticket to have this installed:https://splunkbase.splunk.com/app/4403/
Available on cloud and on-premise

For the Splunk Machine Learning Toolkit documention, see: http://docs.splunk.com/Documentation/MLApp/latest


This application may contain certain sample files and datasets, which are provided for your convenience only. Such files and datasets contain information and data compiled by third parties, and Splunk makes no representation or warranty that the data contained in such files and datasets are true, accurate, complete or sanitized.


You must install the Python for Scientific Computing Add-on before installing the Machine Learning Toolkit. Please download and install the appropriate version here:


To install an app within Splunk Enterprise:

  1. Log into Splunk Enterprise.
  2. Next to the Apps menu, click the Manage Apps icon.
  3. Click Install app from file.
  4. In the Upload app dialog box, click Choose File.
  5. Locate the .tar.gz or .tar file you just downloaded, then click Open or Choose.
  6. Click Upload.

Release Notes

Version 5.3.1
Jan. 12, 2022

This release of Splunk Machine Learning Toolkit (MLTK) contains minor changes and bug fixes to bring compatibility with Python for Scientific Computing (PSC) version 3.0.2.
- A new parameter of exclude_dist is available for the Density Function algorithm. Use this parameter when dist=auto to exclude a minimum of 1 and a maximum of 3 of the available distribution types (norm, expon, gaussian_kde, beta). For more information, see Density Function.
- The streaming_apply feature has now been removed, after deprecation in version 5.0.
- Users upgrading to MLTK version 5.3.0 or higher must retrain models created in lower versions of MLTK.

Version 5.3.0
Sept. 14, 2021

This release of Splunk Machine Learning Toolkit (MLTK) contains changes to bring compatibility with Python for Scientific Computing (PSC) version 3.0.0 and above. Therefore, this version of MLTK is only compatible with PSC 3.0.0 and later.

Note that models created in MLTK version 5.2.2 and earlier are not compatible with this version of MLTK (version 5.3.0) and after. Therefore, if you are upgrading to this version of MLTK, you must also re-create your existing MLTK models.

Version 5.2.2
July 15, 2021

Version 5.2.2
Features and improvements:
There are no new features in MLTK version 5.2.2. A few bug fixes and improvements are included in this release.
This version of MLTK replaces jQuery2 with jQuery3 to address vulnerability issues of jQuery2.
To confirm you are using a compatible version of the MLTK, see the Machine Learning Toolkit version dependencies matrix.

Version 5.2.1
Jan. 19, 2021
Version 5.2.0
May 9, 2020
Version 5.1.0
Jan. 2, 2020
Version 4.5.0
Nov. 1, 2019
Version 5.0.0
Oct. 18, 2019
Version 4.4.2
Oct. 3, 2019
Version 4.4.1
Aug. 23, 2019

Fixed an issue preventing DensityFunction models created in MLTK 4.3.0 from loading in MLTK 4.4.0

Version 4.3.0
May 30, 2019
Version 4.2.0
March 12, 2019
Version 4.1.0
Dec. 3, 2018
Version 4.0.0
Sept. 26, 2018
Version 3.4.0
Aug. 6, 2018
Version 3.3.0
June 20, 2018
Version 3.2.0
April 20, 2018

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.