Skip to main content
Skip table of contents

KB 102 - PowerConnect Splunk App - Machine Learning Tool Kit (MLTK) Setup Guide

KB 102 (Splunk): PowerConnect Splunk App - Machine Learning Tool Kit (MLTK) Setup Guide

Category: Information

Platform: Splunk

Priority: Normal

Version: 1 from 23.03.2021


Some of the dashboards available in the PowerConnect Splunkbase application utilize functionality from Splunk’s Machine Learning Tool Kit. To enable these panels, please following the instructions below.


  1. Download “Splunk Machine Learning Toolkit” of version 4.5.0 or above from splunkbase –

  2. This app can be installed either through UI from “Manage Apps” or by extracting the compressed file into $SPLUNK_HOME$/etc/apps folder.

  3. Restart Splunk

Saved Searches

The following saved searches are used to improve the search performance for the MLTK panels by acceleration. By default this feature is disabled. Users need to manually enable the acceleration

  1. “mltk_sap_security_essentials_anomaly_tcode” – For the “Anomaly Detection: T-Code Executions” panel present in SAP Security Essentials dashboard.

  2. “mltk_sap_security_essentials_forecast_logins” – For the “Forecasting: User Logins” panel present in SAP Security Essentials dashboard.

  3. “mltk_abap_dumps_forecast_dumps” – For the “Forecasting: ABAP dumps” panel present in ABAP Dumps dashboard.

The steps to change the acceleration are:

  1. On Splunk’s menu bar, Click on Settings -> Searches, reports, and alerts.

  2. Select SAP Powerconnect for Splunk (BNW-app-powerconnect) in App.

  3. Click on “Edit” dropdown under “Actions” and click on “Edit Acceleration” for the savedsearch you want to enable acceleration for.

  • Under the Acceleration label, you will find “Accelerate this search” check box.

  • By making a check / uncheck “Accelerate Report” check box, the acceleration option of savedsearch will be enabled/disabled. Click on “Save” after making desired changes.

Product version




PowerConnect [NW,S4HANA,S4HANA Cloud]

[Affected version from]

[Affected version to]

[SAP product version]





JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.