Alert when there is anomaly in machine learning?

[michaelcheung]

Using machine learning, I feed my system's cpu load data to a job continuously. I would like to know if there is combination usage with x-pack's watcher, alerting me when there is anomaly analyzed in machine learning.

I know I can use watcher setting threshold and check high cpu load. But I would consider having the critical anomaly detected in machine learning as the alerting trigger. Is there a way to do so?

Thanks,
Michael

[richcollier]

Hi Michael,

Check out the example ML-based Watches I created here:

https://github.com/elastic/examples/tree/master/Alerting/ml_examples

[bohyun (Bohyun Kim)]

Hi @michaelcheung

In 5.5, we released the watch creation UI in the Machine Learning job workflow as shown below so that it's easier for you to get alerted when critical anomalies were detected. Once you choose the time interval to check against the data and severity threshold, and click apply, it will create a watch for you. You can go to the Watcher UI under Management tab so you can edit the watch further to configure watch actions. By default, there's a logging action.

Thanks,
Bohyun

[richcollier]

And, in v5.5, if your X-Pack Alerting setup has email enabled, then there will also be a Send email option: