Can't understand ML plugin Functionalities

Hi,

The values shown in the expanded row of the anomalies table in the Single Metric Viewer are the typical and actual values observed for the mean(hdopDevice) aggregation used in your detector, over the 30 minute bucket span of your job. It's usually best to ensure the aggregation interval used for plotting the chart matches the bucket span of the job - which you can do by clicking the 'auto' zoom link on the top left of the chart.

As @Badger pointed out, the different components in the Anomaly Explorer view display scores from the various result types. As well as the link mentioned, this blog contains more details on how the anomaly scoring works.

Hope this helps,
Pete

1 Like