I find the ML cannot detect NoDoc
I have config a ML Detector CountDoc and Does not filter anything
- Its Expected Blue , I keep using example data by keep sending HTTP: 200 traffic around 1 second 1 hit
- Its also Expected Red i send another volume traffic , which the ML successful detect it is an abnormal
- However in Green , i stop all traffic sending to opendistro , the Feature breakdown shows correctly that it have ZERO count , but it does not consider it is an abnormal
Which i expected it may not have Anomaly grade 1 score , but at least some score
May i known why or where i can tune this ?