# Typical value

**URL:** <https://discuss.elastic.co/t/typical-value/358043>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-machine-learning\
**Created:** [April 23, 2024, 3:46pm UTC](https://discuss.elastic.co/t/typical-value/358043 "2024-04-23T15:46:25Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![zi\_ninja](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zi_ninja/32/133702_2.png) [@zi\_ninja](https://discuss.elastic.co/u/zi_ninja)\
**Post date:** [April 23, 2024, 3:46pm UTC](https://discuss.elastic.co/t/typical-value/358043/1 "2024-04-23T15:46:25Z")

</div>

In the single metric viewer, I see that the actual value is the value calculated from the actual data, but what about the typical value? How can I determine this typical value? Is the typical value being calculated according to any rules?  
Ex:

```auto
10:00 record_1: product_1
10:01 record_2: product_2
10:02 record_3: product_3
10:05 record_4: product_4
10:09 record_5: product_5
10:16 record_6: product_1
10:19 record_7: product_7
10:20 record_8: product_2
10:21 record_9: product_1
10:22 record_10: product_1
10:23 record_11: product_1
10:24 record_12: product_1
bucket_span1: 10:00-10:15: product_1 actual=1
bucket_span2: 10:16-10:30: product_1 actual=5
==> Typical value ????

```

---

<div class="post-metadata">

**Author:** ![valeriy42](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/valeriy42/32/82758_2.png) [@valeriy42](https://discuss.elastic.co/u/valeriy42)\
**Post date:** [May 6, 2024, 3:25pm UTC](https://discuss.elastic.co/t/typical-value/358043/2 "2024-05-06T15:25:25Z")

</div>

Hello @zi_ninja ,

please refer to [this paper](https://www.ijmlc.org/papers/398-LC018.pdf) for details on how typical values are modeled and calculated.

---

<div class="post-metadata">

**Author:** ![zi\_ninja](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zi_ninja/32/133702_2.png) [@zi\_ninja](https://discuss.elastic.co/u/zi_ninja)\
**Post date:** [May 9, 2024, 7:08am UTC](https://discuss.elastic.co/t/typical-value/358043/3 "2024-05-09T07:08:30Z")

</div>

Is there a way for me to understand better? I read the link you sent but it's just a general algorithm and I don't clearly understand the terminology when your team applies it to anomaly detection.
