Anomaly types

更新时间:
复制 MD 格式

This topic describes the anomaly types that are available in the results of text analysis.

Text analytics results are stored in a Logstore named internal-ml-log. You can use the result.type and result.anomaly_type fields to analyze anomaly types. For more information, see Result fields.

Judgment Conditions

Anomaly Type Description

  • The value of the result.type field is anomaly_info.

  • The value of the result.anomaly_type field is N_CLUSTER_EVENT_ANOMALY.

The number of logs in a log category is abnormal.

  • The value of the result.type field is anomaly_info.

  • The value of the result.anomaly_type field is NEW_CLUSTER_ANOMALY.

A new log category appears.

A new log category can appear in the following two cases:

  • The log category appears for the first time.

  • The log category has appeared before but does not reappear within the maximum silence time. The maximum silence time is set as an algorithm parameter.

  • The value of the result.type field is anomaly_info.

  • The value of the result.anomaly_type field is RARE_CLUSTER_ANOMALY.

The log category rarely appears.