Start with this query.
| rest/servicesNS/-/-/alerts/fired_alerts| search NOT title="-"
Your second question is far too broad to attempt to answer. Please post a new question with more specifics. What kind of data? What is considered an anomaly? What time frame?
---
If this reply helps you, Karma would be appreciated.
