ML Anomaly Detection jobs gives very low score for absense of events

Hello @GlebCA ,

if you are specifically interested in the cases when the event count goes down, you should use low_count.

To trigger alerts when the event count drops to 0, it's easiest to use Kibana alerting and not ML.