# Anomaly Score \< 1, despite a big difference between actual and typical detections

**URL:** <https://discuss.elastic.co/t/anomaly-score-1-despite-a-big-difference-between-actual-and-typical-detections/299743>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-machine-learning\
**Created:** [March 15, 2022, 2:06pm UTC](https://discuss.elastic.co/t/anomaly-score-1-despite-a-big-difference-between-actual-and-typical-detections/299743 "2022-03-15T14:06:01Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)\
**Post date:** [March 15, 2022, 2:54pm UTC](https://discuss.elastic.co/t/anomaly-score-1-despite-a-big-difference-between-actual-and-typical-detections/299743/2 "2022-03-15T14:54:13Z")

</div>

Scoring is relative to other anomalies. The yellow one right after seems more egregious (less probable and thus higher scoring) than the ones circled. Additionally, there is a difference between what an anomaly is scored when the anomaly happened (in real-time) versus what it might be scored as later (after a more egregious anomaly is seen). You can tell by looking at the "initial score" of an anomaly:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/a/facae04d2a74c1dadd7aa8e40be1d584c2c9e955.png)

More info on scoring: [Machine Learning Anomaly Scoring and Elasticsearch - How it Works | Elastic Blog](https://www.elastic.co/blog/machine-learning-anomaly-scoring-elasticsearch-how-it-works)

---

_[View the full topic](https://discuss.elastic.co/t/anomaly-score-1-despite-a-big-difference-between-actual-and-typical-detections/299743)._