Anomaly Detection Categorization: Kibana Severity vs Anomaly score

Elastic Stack Kibana
1

Hi,

I am using
Elasticsearch 8.1.0
Kibana 8.1.0

I have created a Categorization job in kibana. As input, I have given the index field which contains the log messages.

After the job gets completed processing, I can see the Analysis results at the bottom in tabular format.

For example: I can see only one instance of ml category 7 with a severity score of 48.
But within Top Influencers section for ml category 7, the max anomaly score is 44. And also the total anomaly score for ml category 7 is 178.

Does severity score mean the same thing as anomaly score? If they are same why the value is different in Top Influencers section and the analysis results section?

If total anomaly score is 178, that means there were other occurrences of ml category 7, why are not those occurrences shown in the analysis results section?

2

Please refer to this blog for information on scoring.

1 Like
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.