I have the documents which contains the Response codes like 200,400, 500.
Now i have to create the ML job it should filter the documents which contains the response codes other than 200 treated as Anomalies.
Below are the fields looks like
@timestamp Nov 8, 2019 @ 05:21:15.401
@version 1
Address http://xxxxxxxxx/services/api/e
Message_Id 33xxxxx
Request_Time Nov 8, 1970 @ 06:21:14.924
Response-Code 200
Response_Payload {"success":true,"message":"Loaded 0 entries","data":,"total":"0","metaData":{"root":"data","fields":
I have added data feed as
{
"bool": {
"filter": {
"range": {
"Response-Code": {
"gte": "201"
}
}
}
}
}
Now what is the detector i have to choose to detect Anomalies