How it works...

Let's break down the search piece by piece:

Search fragment

Description

   
index=main sourcetype=log4j   requestType="checkout"   

You should be familiar with this search from the earlier recipes in this chapter. It is used to return events from the website access log. The search contains a field value filter, requestType="checkout", so that the returned results only include those events that are checkout requests, effectively representing a completed transaction.

   
| timechart sum(total) AS total   span=1week   

Using the table command, we simplify the dataset into a tabulated view of the _time of the event and the value of the response field for the given event.

 | predict "total" as prediction algorithm="LLP" future_timespan="10" ...

Get Splunk Operational Intelligence Cookbook - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.