icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.
Splunkbase will be undergoing a scheduled migration and will be unavailable on Saturday, Oct 1, 2022, from 11AM to 3PM PDT

Accept License Agreements

Thank You

Downloading Splunk Machine Learning Toolkit
SHA256 checksum (splunk-machine-learning-toolkit_533.tgz) 47a8b2b14aacd0aa3f5064f79b7f25cb5e2a81cf5dc59991a1493665735961ef SHA256 checksum (splunk-machine-learning-toolkit_531.tgz) 5726191cb1e43144e700d109dbb8736976c1a4926d4b86189d781bca56901a8b SHA256 checksum (splunk-machine-learning-toolkit_530.tgz) 94b9149f0391b34a8ed6e2890341e57c79070b93244b8c33ac7ec7fed4a9f753 SHA256 checksum (splunk-machine-learning-toolkit_522.tgz) 35f92672f4b31c5980d64e7d9fe513762552de46a26ba642875624dca9d4eaab SHA256 checksum (splunk-machine-learning-toolkit_521.tgz) 0699cb3c9923192d0c4fe7a00ac07a2004dd70e6ac7c5d8316d1808d943d6f65 SHA256 checksum (splunk-machine-learning-toolkit_450.tgz) 221ca3777324671544c64f607fe19bb8af421d77829cff46e74f79561838694c
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate


Splunk Machine Learning Toolkit

Splunk Cloud
Splunk Built
Splunk Machine Learning Toolkit

The Splunk Machine Learning Toolkit App delivers new SPL commands, custom visualizations, assistants, and examples to explore a variety of ml concepts.

Each assistant includes end-to-end examples with datasets, plus the ability to apply the visualizations and SPL commands to your own data. You can inspect the assistant panels and underlying code to see how it all works.

Look for our ML Youtube Playlist for simple explanations of how to use MLTK and what it is for.

ML Cheat Sheet https://docs.splunk.com/images/3/3f/Splunk-MLTK-QuickRefGuide-2019-web.pdf

* Predict Numeric Fields (Linear Regression): e.g. predict median house values.
* Predict Categorical Fields (Logistic Regression): e.g. predict customer churn.
* Detect Numeric Outliers (distribution statistics): e.g. detect outliers in IT Ops data.
* Detect Categorical Outliers (probabilistic measures): e.g. detect outliers in diabetes patient records.
* Forecast Time Series: e.g. forecast data center growth and capacity planning.
* Cluster Numeric Events: e.g. Cluster Hard Drives by SMART Metrics

Smart Assistants (new assistants with revamped UI and better ml pipeline/experiment management):
*Smart Forecasting Assistant (provides enhanced time-series analysis for users with little to no SPL knowledge and leverages the StateSpaceForecasting algorithm): e.g. forecasting app logons with special days

Available on both on-premise and cloud.

Deep Learning Toolkit for Splunk
Integrate with advanced custom machine learning systems using the Deep Learning Toolkit for Splunk (https://splunkbase.splunk.com/app/4607/). It extends Splunk’s Machine Learning Toolkit with prebuilt Docker containers for TensorFlow 2.0, PyTorch and a collection of NLP libraries. Python expertise is required to create your own neural networks.
Available only for on-premise customers.

Splunk Community for MLTK Algorithms on GitHub
Check out our Open Source community on Github that lets you share your algorithms with the community of Splunk MLTK users or import one of the algorithms that have been shared by the community: https://github.com/splunk/mltk-algo-contrib

The GitHub repo algorithms are also available as an app which provides access to custom algorithms. Cloud customers can use GitHub algorithms via this app and need to create a support ticket to have this installed:https://splunkbase.splunk.com/app/4403/
Available on cloud and on-premise

For the Splunk Machine Learning Toolkit documention, see: http://docs.splunk.com/Documentation/MLApp/latest


This application may contain certain sample files and datasets, which are provided for your convenience only. Such files and datasets contain information and data compiled by third parties, and Splunk makes no representation or warranty that the data contained in such files and datasets are true, accurate, complete or sanitized.


You must install the Python for Scientific Computing Add-on before installing the Machine Learning Toolkit. Please download and install the appropriate version here:


To install an app within Splunk Enterprise:

  1. Log into Splunk Enterprise.
  2. Next to the Apps menu, click the Manage Apps icon.
  3. Click Install app from file.
  4. In the Upload app dialog box, click Choose File.
  5. Locate the .tar.gz or .tar file you just downloaded, then click Open or Choose.
  6. Click Upload.

Release Notes

Version 5.3.3
Aug. 11, 2022
  • This MLTK version does not include any new features, and addresses bug fixes only.
  • The Classic tab of MLTK app is now removed from the MLTK app. The features of Classic tab are already available in the Experiments tab.
  • Version 4.0.0 of the PSC add-on is supported by MLTK 5.3.3 on Splunk 8.1.x, 8.2.x and Splunk 9.0.0.
  • Internet Explorer browser is no longer supported with MLTK 5.3.3 due to the browser’s retirement by Microsoft.
Version 5.3.1
Jan. 12, 2022

This release of Splunk Machine Learning Toolkit (MLTK) contains minor changes and bug fixes to bring compatibility with Python for Scientific Computing (PSC) version 3.0.2.
- A new parameter of exclude_dist is available for the Density Function algorithm. Use this parameter when dist=auto to exclude a minimum of 1 and a maximum of 3 of the available distribution types (norm, expon, gaussian_kde, beta). For more information, see Density Function.
- The streaming_apply feature has now been removed, after deprecation in version 5.0.
- Users upgrading to MLTK version 5.3.0 or higher must retrain models created in lower versions of MLTK.

Version 5.3.0
Sept. 14, 2021

This release of Splunk Machine Learning Toolkit (MLTK) contains changes to bring compatibility with Python for Scientific Computing (PSC) version 3.0.0 and above. Therefore, this version of MLTK is only compatible with PSC 3.0.0 and later.

Note that models created in MLTK version 5.2.2 and earlier are not compatible with this version of MLTK (version 5.3.0) and after. Therefore, if you are upgrading to this version of MLTK, you must also re-create your existing MLTK models.

Version 5.2.2
July 15, 2021

Version 5.2.2
Features and improvements:
There are no new features in MLTK version 5.2.2. A few bug fixes and improvements are included in this release.
This version of MLTK replaces jQuery2 with jQuery3 to address vulnerability issues of jQuery2.
To confirm you are using a compatible version of the MLTK, see the Machine Learning Toolkit version dependencies matrix.

Version 5.2.1
Jan. 19, 2021
Version 4.5.0
Nov. 1, 2019

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.