This is a general question (but I am running O.S. v2.18)
Is there a way - when creating an anomaly detector - to select a field from the source index to be ‘inserted’ into the anomaly results index ?
For correlating back to the original data.
This is a general question (but I am running O.S. v2.18)
Is there a way - when creating an anomaly detector - to select a field from the source index to be ‘inserted’ into the anomaly results index ?
For correlating back to the original data.