# How data for 'Overall' field in 'Anomaly Explorer' window is calcualted **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-machine-learning\ **Created:** [November 3, 2017, 9:39am UTC](https://discuss.elastic.co/t/how-data-for-overall-field-in-anomaly-explorer-window-is-calcualted/106292 "2017-11-03T09:39:24Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![anomalyml](https://avatars.discourse-cdn.com/v4/letter/a/3ab097/32.png) [@anomalyml](https://discuss.elastic.co/u/anomalyml)\ **Post date:** [November 3, 2017, 9:39am UTC](https://discuss.elastic.co/t/how-data-for-overall-field-in-anomaly-explorer-window-is-calcualted/106292/1 "2017-11-03T09:39:25Z")
Hi, I have created a 'multi metric job' analysis for a given data. After completing the analysis, I check my results from 'Anomaly Explorer' window. From the documents I understand, the anomaly is calculated independently for each available metric based on their own history and finally grouped together inside a single container to be displayed in 'Anomaly Explorer' window. I see an row field called 'Overall' at the top of 'Anomaly Explorer' window. I would like to know how the values are calculated and populated for that field. Is it an average of all the individual anomaly scores for the corresponding time in all metrics or calculated in a different way? Thank you. ---
**Author:** ![Peter\_Harverson](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/peter_harverson/32/21057_2.png) [@Peter\_Harverson](https://discuss.elastic.co/u/Peter_Harverson)\ **Post date:** [November 6, 2017, 1:19pm UTC](https://discuss.elastic.co/t/how-data-for-overall-field-in-anomaly-explorer-window-is-calcualted/106292/2 "2017-11-06T13:19:39Z")
Hi, Each Machine Learning job generates different types of results, and the anomaly scores from each of these result types are displayed in the various components of the Anomaly Explorer view (Top Influencers, Anomaly Timeline, anomaly charts and table). The Overall lane at the top of the Anomaly timeline displays the maximum anomaly scores of the 'bucket influencer' result type. The bucket influencer results are an aggregation of each of the 'influencers' you chose when creating the multi metric job, selected in the 'Key fields' section of the Multi Metric job wizard. In addition to any 'field' influencers you selected when creating the job, there is a built-in bucket influencer, called 'bucket\_time'. This bucket influencer is the aggregation of all the anomaly records in each time bucket. The calculation behind the `bucket_influencer` anomaly score displayed in the Overall timeline is more complex than just a simple average of all the individual record anomaly scores, but will have a contribution from the influencer scores in each bucket. More information on the scores used in the various components of the Anomaly Explorer window can be found [in this post](https://discuss.elastic.co/t/problems-understanding-anomaly-explorer/104266/2), and there is information on the `bucket_influencer` result type in the docs [here](https://www.elastic.co/guide/en/elasticsearch/reference/5.6/ml-results-resource.html#ml-results-bucket-influencers). Hope that helps Pete ---
**Author:** ![anomalyml](https://avatars.discourse-cdn.com/v4/letter/a/3ab097/32.png) [@anomalyml](https://discuss.elastic.co/u/anomalyml)\ **Post date:** [November 7, 2017, 4:06am UTC](https://discuss.elastic.co/t/how-data-for-overall-field-in-anomaly-explorer-window-is-calcualted/106292/3 "2017-11-07T04:06:38Z")
Hi Pete, Thanks for the detailed explanation. Thanks. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 5, 2017, 4:06am UTC](https://discuss.elastic.co/t/how-data-for-overall-field-in-anomaly-explorer-window-is-calcualted/106292/4 "2017-12-05T04:06:40Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.