How to know influencers list using query

Elastic Stack Kibana
1

When I query to ml result index (.ml-anomalies-[job-id]), I can see only influencers score.
but I can not get influencers list.
How can I get influencers list??

{
        "_index" : ".ml-anomalies-shared",
        "_type" : "_doc",
        "_id" : "ml_oap_bucket_3_advanced_multi_metric_bucket_1660545000000_180",
        "_score" : 5.0974455,
        "_source" : {
          "job_id" : "ml_oap_bucket_3_advanced_multi_metric",
          "timestamp" : 1660545000000,
          "anomaly_score" : 62.14553,
          "bucket_span" : 180,
          "initial_anomaly_score" : 68.13430095633603,
          "event_count" : 99338,
          "is_interim" : false,
          "bucket_influencers" : [
            {
              "job_id" : "ml_oap_bucket_3_advanced_multi_metric",
              "result_type" : "bucket_influencer",
              "influencer_field_name" : "appid.keyword",
              "initial_anomaly_score" : 61.71888189926247,
              "anomaly_score" : 55.36411,
              "raw_anomaly_score" : 32.759297648550486,
              "probability" : 1.5316133610243559E-34,
              "timestamp" : 1660545000000,
              "bucket_span" : 180,
              "is_interim" : false
            },
            {
              "job_id" : "ml_oap_bucket_3_advanced_multi_metric",
              "result_type" : "bucket_influencer",
              "influencer_field_name" : "host.keyword",
              "initial_anomaly_score" : 60.2312514166517,
              "anomaly_score" : 62.14553,
              "raw_anomaly_score" : 7.363155495836113,
              "probability" : 1.0627361478242137E-10,
              "timestamp" : 1660545000000,
              "bucket_span" : 180,
              "is_interim" : false
            },
            {
              "job_id" : "ml_oap_bucket_3_advanced_multi_metric",
              "result_type" : "bucket_influencer",
              "influencer_field_name" : "svcid.keyword",
              "initial_anomaly_score" : 53.426418118869194,
              "anomaly_score" : 52.08513,
              "raw_anomaly_score" : 33.46168246372424,
              "probability" : 3.355579117582222E-35,
              "timestamp" : 1660545000000,
              "bucket_span" : 180,
              "is_interim" : false
            },
            {
              "job_id" : "ml_oap_bucket_3_advanced_multi_metric",
              "result_type" : "bucket_influencer",
              "influencer_field_name" : "uri.keyword",
              "initial_anomaly_score" : 68.13430095633603,
              "anomaly_score" : 60.96792,
              "raw_anomaly_score" : 29.87136166704612,
              "probability" : 7.875401803015324E-32,
              "timestamp" : 1660545000000,
              "bucket_span" : 180,
              "is_interim" : false
            },
            {
              "job_id" : "ml_oap_bucket_3_advanced_multi_metric",
              "result_type" : "bucket_influencer",
              "influencer_field_name" : "bucket_time",
              "initial_anomaly_score" : 1.1661618130084084,
              "anomaly_score" : 1.1661618130084084,
              "raw_anomaly_score" : 16.872827897162875,
              "probability" : 1.2559660277530078E-19,
              "timestamp" : 1660545000000,
              "bucket_span" : 180,
              "is_interim" : false
            }
          ],
          "processing_time_ms" : 4,
          "result_type" : "bucket"
        }
      }
2

please filter on "result_type" : "influencer"

3

Thanks, I found influencer list.

Is there any document for where I can check the properties?
I would like to know more about each property.

4

I have one more question.

Would you please explain exactly what bucket_influencers is??

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.