How to compare two aggregations buckets in watcher

[addanuj (Anuj Shrivastava)]

Hi

Please let me know how i can compare two different aggregations buckets, i am only able to compare one bucket with one static value but i need to compare all values of two different aggregations buckets.

which should i use: array_compare or only compare?

[richcollier]

Anuj,

I've already recommended in a different thread that you should look at this post for ideas:

Comparing values from 2 ML Jobs in watcher

Hi, I have 2 different ML jobs. Identifies the anomaly in the users unusual login time. IE if users regularly logs in between 11:00 AM - 6:00 PM and one day he/she logs in @ 12:00 AM. this will be detected as a anomaly. Detect longitude-latitude usually used by a person, if a person usually logs in fro 11.222, -11.33 (example) and suddenly logs in from 13.22, -34,55. this will be detected as anomaly. This 2 job independently works fine. I need to write a watcher over these 2 job which …

Why do you keep on asking? I'm confused...

[addanuj (Anuj Shrivastava)]

ohh my bad. i haven't saw that thread.

thank you so much Rich,