For Anomaly detection, on string field, which meth...

VS0909 · ‎09-01-2020

For Anomaly detection, on string field, which method is better - Zscore or histogram? Please suggest

VS0909 · ‎09-01-2020

@thambisettyThanks for the reply!

This mentions mostly for numeric fields, I am looking for Zscore or histogram for string(character) field.

For Anomaly detection, on string field, which method is better - Zscore or histogram? Please suggest!

thambisetty · ‎09-01-2020

z--score, you should apply standard deviation to see how the values are deviating. with out count of strings, I don't know how you calculate zscore, or histogram.

————————————
If this helps, give a like below.

thambisetty · ‎09-01-2020

https://conf.splunk.com/files/2019/recordings/FN1390.mp4

————————————
If this helps, give a like below.

For Anomaly detection, on string field, which method is better - Zscore or histogram?

count

fields

lookup

stats

subsearch

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Join the Conversation

For Anomaly detection, on string field, which method is better - Zscore or histogram?