Hi, I'm trying to put together some search queries for some common anomaly detection. I've been trying to find ones for these issues and I seem to come up with nothing. Some common ...
Hi all, I have a table and I need to highlight the values that are greater than lets say 5 in a line graph. how to select only those specific values into search
Hello I have the following fields on EventCode=4625 (failed login events), Fields: _time, Source_Network_Address,Account_Name,Workstation Name,EventCode And i want to create anomaly creation ru...
I'm getting what I believe are strange results when using the round function to control the number of decimal places. This is a search that I have in a dashboard to calculate how much data (in GB) t...
Hi,
Can anyone explain the difference between anomalies and anomalousvalue? From the search reference, it looks like anomalies operates on a single field and is context-sensitive (i.e. looks at t...
Assume i have daily records about an amount of keys.
What would be the search to trigger an alert condition if changes are seen by say +/- 10% ?
Sample records, the best case case would be if t...
Trying to find anomalies for events. I have multiple services and multiple customers. I have an error "bucket" that is caputuring events for failures, exceeded, notified, etc. I'm looking for a w...
...ee this AAR getting applied to anomalies that have IP address which are listed in watchlist. Can anyone please suggest what could the reason behind it and how can I resolve it. Thanks!