Metric Functions

Metric functions include mean, min and max. These values are calculated for each bucket. Detects anomalies where the mean, min or max of the bucket is unusual.

min(field1) [by <field2>] [over <field3>]
max(field1) [by <field2>] [over <field3>]
mean(field1) [by <field2>] [over <field3>]
high_mean(field1) [by <field2>] [over <field3>]
low_mean(field1) [by <field2>] [over <field3>]
metric(field1) [by <field2>] [over <field3>]

Note: Further configuration options are available, which are described in the Detector Configuration section:

function(field1) [by <field2>] [over <field3>] [partitionfield=<field4>] [summarycountfield=<field5>] [categorizationfield=<field6>] [excludefrequent=true] [usenull=true]

min

Detect where the smallest transaction is lower than previously observed. This could be used to detect items for sale at unintentionally low prices due to data entry mistakes.

min(amt) by product
  • Model the minumum amount for each product over time
  • Detect when the minumum amount for a product is unusually low compared to its past amounts

high_ or low_ sided functions are not applicable.

max

Detect where the longest responsetime is longer than previously observed. This could be used to detect applications which have responsetimes that are unusually lengthy.

max(responsetime) by application
  • Model the maximum responsetime for each application over time
  • Detect when the longest responsetime is unusually long compared to previous application

Note: This analysis can be performed alongside high_mean(responsetime) by application. By combining detectors and using the same influencer this would detect both unusually long individual responsetimes as well as average responsetimes for each bucket.

high_ or low_ sided functions are not applicable.

mean

mean(responsetime) by application
high_mean(responsetime) by application
low_mean(responsetime) by application
  • Model the mean responsetime for each application over time
  • Detect when the mean responsetime is unusual compared to previous responsetimes

Use high_mean if you wish to monitor unusually high average responsetimes. Use low_mean if you are just interested in unusually low average responsetimes.

metric

metric(responsetime) by application
  • Model the mean, min and max responsetime for each application over time
  • Detect when the mean, min or max responsetime is unusual compared to previous responsetimes

The metric function combines min, max and mean. It can be used as a shorthand for a combined analysis.

high_ or low_ sided functions are not available.

See also

This page

Browse

You are here