Influencer Overview

This endpoint provides access to all of the job’s influencers. This provides an aggregated view of the anomalousness of entites over all the detectors in a job.

The default ordering is the most anomalous results first but this can changed by specifying a different field to the sort query option. In addition influencers can be filtered based on anomalyScore and date.

Influencers Endpoint

The endpoint for obtaining a job’s anomaly influencers is:

http://localhost:8080/engine/v1/results/<jobId>/influencers

Using the cURL command line client for example, to get the influencers for the job with ID job001 you would use the call:

curl -X GET 'http://localhost:8080/engine/v1/results/job001/influencers'

This call returns a paging document containing a list of anomaly influencers.

{
  "hitCount" : 190,
  "skip" : 0,
  "take" : 100,
  "nextPage" : "http://localhost:8080/engine/v1/results/job001/influencers?skip=100&take=100",
  "previousPage" : null,
  "documents" : [ {
    "timestamp" : "2015-12-10T05:10:00.000+0000",
    "probability" : 3.24563E-184,
    "anomalyScore" : 100.0,
    "influencerFieldValue" : "Bob",
    "influencerFieldName" : "user",
    "isInterim" : false
  }, {
    "timestamp" : "2015-12-10T05:00:00.000+0000",
    "probability" : 2.07911E-203,
    "anomalyScore" : 92.0,
    "influencerFieldValue" : "Susie",
    "influencerFieldName" : "user",
    "isInterim" : false
  }, {
  ...