Anomalies and bucket span

Elastic Stack Elasticsearch
1

Hi, I have a ML job with a bucket span of 5 minutes. when an anomaly is detected and displayed in a graph, the red dot is the beggining of that bucket span? or the end of the bucket span? in other words the red dot indicates that the previous 5 minutes where anomalous or the following 5 minutes are anomalous?

image

2

the timestamp written for the anomaly is for the time that is the beginning of the bucket span
Therefore, an anomaly with a timestamp of 13:50:00 and a bucket span of 5m will mean that the anomaly occurred in the 13:50:00-13:55:00 range

2 Likes
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.