How to easily see log events that caused the anomaly?

Elastic Stack Elasticsearch
1

ES 6.6

I'm indexing logs from a cluster. One field is numeric and shows the duration of DB transactions.

I made an anomaly detector tracking the numeric field. I see it flagging anomalies. In the Anomaly Explorer, I expand one anomaly and I look at the info therein. I can view the series just fine.

But I could not find a way to easily jump from there to the Discover window with the events that surround the anomaly filtered and displayed.

In other words, I want to see the logs that caused the anomaly. I want to see the actual DB transactions that were executed during that time. I could manually search for them, based on the info in the Anomaly Explorer, but I was hoping there's a direct link to it from the ML window.

2

Create a Custom URL

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.