Hi Victor - a couple of considerations here:
-
Be careful describing the use case using "over" as that implies that you are using Population Analysis instead of Temporal (https://www.elastic.co/blog/temporal-vs-population-analysis-in-elastic-machine-learning). In Population Analysis you'd be comparing the count of every
http_pathagainst otherhttp_paths . In Termporal, you'd be comparing a particular count of each and everyhttp_pathagainst its own history. -
If you want to do Temporal, you need to be careful of the cardinality of the
http_pathfield. If it is in the tens of thousands or more, you may need to adjust themodel_memory_limit.