Machine learning use case - Anomaly Detection

[jessgarson]

Thanks for following up, @sunith. As a next step, please verify that the bucket span is appropriate for your use case (typically 15 minutes to 1 hour for login patterns).