Dashboard anomaly score is not what we wanted

Elastic Stack Elasticsearch
1

We create a dashboard which return a single column to show actual, typical, anomaly score

Apparently, the actual is the highest(actual) the typical is the highest(typical)

The anomaly score is calculated based on the two highest value which is correct but not what we wanted.

If we go to the anomaly explorer. the record with the highest (actual) may not be the record with the highest(typical)

How do we configure the column to show only single record with the highest anomaly score?

and also display the value of the actual and typical from the row of the highest anomaly score

2

It’s a little hard to follow what you’re trying here without screenshot.

So, you can query the result index directly for reporting. Maybe something like this?

image
image3026×1224 322 KB