Creating Anomaly Detection alerts

An Anomaly Detection alert can be created to monitor changes in the values reported for daily or hourly Anomaly Detections.

About this task

Although you may be able to track Anomaly Detections through configured Anomaly Detection reports, it may be more useful to configure alerts to notify you of significant changes or abnormal values reported in each Anomaly Detection of interest to you.

Note: Anomaly Detection alerts do not display in the Alert Monitor.

Anomaly Detection can be created to monitor deviations in event values or ratios of values. They can be configured in the Discover Event Manager. See Manage Events - Anomaly Detection Tab.

To create an Anomaly Detection alert, click the Alert tab in the Discover Event Manager. Then, select New Anomaly Detection Alert.... The following dialog is displayed.

The alert properties window for Anomaly Detection alerts is similar to the window for configuring event-based alerts. The following properties are specific to alerts of this type:

Property
Description
Anomaly Detection
Click to select the saved Anomaly Detection that you want to monitor through this alert.
  • Anomaly Detections are grouped by frequency in Hourly and Daily panels.
  • If the Anomaly Detection is a dimensional Anomaly Detection, the dimension and all values in the dimension are automatically selected for tracking.
    • When all values are tracked, any value that exceeds the threshold triggers the alert.
    • To select specific dimension values to track, click <Any Dimension Value>.
  • When an Anomaly Detection is selected, the Interval is taken from the interval that is defined for the Anomaly Detection. An interval setting for the alert is not separately available for user configuration.

For more information about the other properties:

Procedure

  1. Alert configuration properties
  2. Alert notification properties
    • When email recipients drill into the alert, the Portal creates a report using the monitored Anomaly Detection and opens it in the Portal.
  3. Alert blackout properties
    Note: For Anomaly Detection alerts, the blackout settings are applied based on when the data was acquired. For example, daily Anomaly Detections are calculated the day after acquisition, so the blackout periods are configured to apply to the previous date. Blackouts for hourly Anomaly Detections are similarly offset to the period when they were captured.