What I search "result_type : bucket" in ml index, I could see bucket_influencers info.
Would you please explain exactly what bucket_influencers is??
And Is there any document for where I can check the properties?
I would like to know more about each property in ml index.
{
"_index" : ".ml-anomalies-shared",
"_type" : "_doc",
"_id" : "ml_oap_bucket_3_advanced_multi_metric_bucket_1660545000000_180",
"_score" : 5.0974455,
"_source" : {
"job_id" : "ml_oap_bucket_3_advanced_multi_metric",
"timestamp" : 1660545000000,
"anomaly_score" : 62.14553,
"bucket_span" : 180,
"initial_anomaly_score" : 68.13430095633603,
"event_count" : 99338,
"is_interim" : false,
"bucket_influencers" : [
{
"job_id" : "ml_oap_bucket_3_advanced_multi_metric",
"result_type" : "bucket_influencer",
"influencer_field_name" : "appid.keyword",
"initial_anomaly_score" : 61.71888189926247,
"anomaly_score" : 55.36411,
"raw_anomaly_score" : 32.759297648550486,
"probability" : 1.5316133610243559E-34,
"timestamp" : 1660545000000,
"bucket_span" : 180,
"is_interim" : false
},
{
"job_id" : "ml_oap_bucket_3_advanced_multi_metric",
"result_type" : "bucket_influencer",
"influencer_field_name" : "host.keyword",
"initial_anomaly_score" : 60.2312514166517,
"anomaly_score" : 62.14553,
"raw_anomaly_score" : 7.363155495836113,
"probability" : 1.0627361478242137E-10,
"timestamp" : 1660545000000,
"bucket_span" : 180,
"is_interim" : false
},
{
"job_id" : "ml_oap_bucket_3_advanced_multi_metric",
"result_type" : "bucket_influencer",
"influencer_field_name" : "svcid.keyword",
"initial_anomaly_score" : 53.426418118869194,
"anomaly_score" : 52.08513,
"raw_anomaly_score" : 33.46168246372424,
"probability" : 3.355579117582222E-35,
"timestamp" : 1660545000000,
"bucket_span" : 180,
"is_interim" : false
},
{
"job_id" : "ml_oap_bucket_3_advanced_multi_metric",
"result_type" : "bucket_influencer",
"influencer_field_name" : "uri.keyword",
"initial_anomaly_score" : 68.13430095633603,
"anomaly_score" : 60.96792,
"raw_anomaly_score" : 29.87136166704612,
"probability" : 7.875401803015324E-32,
"timestamp" : 1660545000000,
"bucket_span" : 180,
"is_interim" : false
},
{
"job_id" : "ml_oap_bucket_3_advanced_multi_metric",
"result_type" : "bucket_influencer",
"influencer_field_name" : "bucket_time",
"initial_anomaly_score" : 1.1661618130084084,
"anomaly_score" : 1.1661618130084084,
"raw_anomaly_score" : 16.872827897162875,
"probability" : 1.2559660277530078E-19,
"timestamp" : 1660545000000,
"bucket_span" : 180,
"is_interim" : false
}
],
"processing_time_ms" : 4,
"result_type" : "bucket"
}
}