Anomaly detection using filter in custom expression

Can you share index schema and your custom expression?