[role="xpack"] [testenv="platinum"] [[ml-forecast]] === Forecast jobs API ++++ Forecast jobs ++++ Predicts the future behavior of a time series by using its historical behavior. [[ml-forecast-request]] ==== {api-request-title} `POST _ml/anomaly_detectors//_forecast` [[ml-forecast-prereqs]] ==== {api-prereq-title} * If the {es} {security-features} are enabled, you must have `manage_ml` or `manage` cluster privileges to use this API. See <>. [[ml-forecast-desc]] ==== {api-description-title} See {ml-docs}/ml-overview.html#ml-forecasting[Forecasting the future]. [NOTE] =============================== * If you use an `over_field_name` property in your job, you cannot create a forecast. For more information about this property, see <>. * The job must be open when you create a forecast. Otherwise, an error occurs. =============================== [[ml-forecast-path-parms]] ==== {api-path-parms-title} ``:: (Required, string) include::{docdir}/ml/ml-shared.asciidoc[tag=job-id-anomaly-detection] [[ml-forecast-request-body]] ==== {api-request-body-title} `duration`:: (Optional, <>) A period of time that indicates how far into the future to forecast. For example, `30d` corresponds to 30 days. The default value is 1 day. The forecast starts at the last record that was processed. `expires_in`:: (Optional, <>) The period of time that forecast results are retained. After a forecast expires, the results are deleted. The default value is 14 days. If set to a value of `0`, the forecast is never automatically deleted. [[ml-forecast-example]] ==== {api-examples-title} [source,console] -------------------------------------------------- POST _ml/anomaly_detectors/total-requests/_forecast { "duration": "10d" } -------------------------------------------------- // TEST[skip:requires delay] When the forecast is created, you receive the following results: [source,js] ---- { "acknowledged": true, "forecast_id": "wkCWa2IB2lF8nSE_TzZo" } ---- // NOTCONSOLE You can subsequently see the forecast in the *Single Metric Viewer* in {kib}.