ml_detect_anomalies
Detect anomalies in operational metrics like alert volume and incident trends by analyzing numeric fields over a configurable look-back period.
Instructions
Run anomaly detection on operational metrics (alert volume, incident trends, etc.)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| days | No | Look-back period in days (default 30) | |
| field | Yes | Numeric field to analyse (e.g. priority, reassignment_count) | |
| table | Yes | Table to analyze (e.g. incident, sn_agent_alert) | |
| threshold | No | Standard deviations for anomaly threshold (default 2) |