Hi, I have bandwidth utilization data from multiple interfaces that belong to multiple specifics server. and I was wondering if I can configure the job to create buckets anomalies only when interfaces that belong to a single server are creating anomalies.
No. Bucket-level anomalies are an aggregation of anomalousness for the job as a whole. It answers the question "how anomalous was this bucket of time?".
If you want entity-centric information, perhaps query for influencer-level anomalies (result_type:influencer)
1 Like
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.