ml_detect_anomalies
Detect anomalies in operational metrics such as alert volume and incident trends using statistical thresholds and configurable look-back periods.
Instructions
Run anomaly detection on operational metrics (alert volume, incident trends, etc.)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| table | Yes | Table to analyze (e.g. incident, sn_agent_alert) | |
| field | Yes | Numeric field to analyse (e.g. priority, reassignment_count) | |
| days | No | Look-back period in days (default 30) | |
| threshold | No | Standard deviations for anomaly threshold (default 2) |