File tree Expand file tree Collapse file tree 1 file changed +14
-0
lines changed
docs/reference/release-notes Expand file tree Collapse file tree 1 file changed +14
-0
lines changed Original file line number Diff line number Diff line change @@ -29,3 +29,17 @@ the influence of the anomaly scores in each partition on other partitions' score
2929The overall effect of the change is to produce a much wider range of scores in
3030partitioned multi-metric jobs.
3131
32+ [float]
33+ === Find multi-bucket anomalies in {ml} jobs
34+
35+ Sometimes events are not interesting or anomalous in the context of a single
36+ bucket. However, they become interesting when you take into consideration a
37+ sequence of buckets as a whole. In 6.5, there is a new {ml}
38+ _multi-bucket analysis_, which uses features from multiple contiguous buckets
39+ for anomaly detection. The final anomaly score is now a combination of values
40+ from both the “standard” single-bucket analysis and the new multi-bucket
41+ analysis. A new `multi_bucket_impact` property in the
42+ <<ml-results-records,record results>> indicates how strongly either form of
43+ analysis influences the score. In {kib}, anomalies with medium or high
44+ multi-bucket impact are depicted in the *Anomaly Explorer* and the
45+ *Single Metric Viewer* with a cross symbol instead of a dot.
You can’t perform that action at this time.
0 commit comments