Question About the ‘Supplied Configurations’ Section in Anomaly Detection for Time Series Data with Machine Learning on Elastic Cloud 8.17

Elastic Security SIEM
1

While using Anomaly Detection in Time Series Data with Machine Learning in Elastic Cloud 8.17, I came across the 'Supplied Configurations' section.

When I clicked there, I found what is shown in the following image:

image
image1881×847 129 KB

All these options are automatic, right? Elastic detects if the data is suitable for these types, correct?

In other words, when I upload the data and go to the machine learning section, will I see icons on the right side indicating that it is possible to analyze using these models?

The number of icons that are in the "Supplied Configurations" section will depend in the number of "Integrations" added, correct?

2

The docs say:

The configurations are only available if data exists that matches the queries specified in the manifest files. These recognizer queries are linked in the descriptions of the individual configurations.

So, this list is basically showing you the same information in the documentation, not which jobs you can configure right now

3

Hey Rich! Thank you for your answer! I appreciate it a lot!

Two questions for you:

  1. So, your answer is that the "Supplied Configurations" does not depend of the integrations that you have added?

  2. When you open a "Data View" in the right, sometimes you see some "ML" options, right? Do those ML options depend on the integrations that you have added?

4
  1. Correct - that page looks like that in a blank cluster with no data in it.
  2. Not sure what you mean. If I pick a supplied configuration, like Apache, it will offer a "Run data recognizer" button to determine if I have that data in my cluster (in this case, I don't have any Apache logs in my cluster):

image
image1920×1343 102 KB
(

5

Fantastic answer! Thank you! I will accept your answer! Excellent information! The "Run data recognizer" button that you mention is a wonderful help! I did not know about that powerful option!

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.