Recommended workflow for man events

If your set of active and reportable events and dimensions contains many objects, you may want to follow the workflow below to monitor the effects of enabling Anomaly Detections.

The basic approach is to manually create a set of Anomaly Detections that should generate a representative or even a high volume of data. The effects on Data Collector performance and on Anomaly Detection data storage should be observed for a period. If you feel confident that you have sufficient processor and data storage resources to handle the entire data set, you can enable auto-creation of Anomaly Detections then.