Dynamically filter data without having to update detector everytime?

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
3.0.0

Describe the issue:
Context :
I am looking to separate anomaly detection results by more than two categorical variables (the max allowed amount in OpenSearch). The only way that I can think of to achieve this is to create separate detectors for each of the entries in my the third categorical variable, and filter the data accordingly. However, I am not looking to create many detectors in this manner. I saw that I can update the data filter through the API, and then start a new job to get these same results, but I do not want to keep updating the detector to achieve this.

Question :
Can I dynamically pass a data filter into a detector, so that I can achieve my desired results without having to update the detector every time? Is there any other way I can get anomaly detection results split by more than two categorical variables?

Configuration:

Relevant Logs or Screenshots:

So you can change the limit past 2 for number of categorical fields to create detectors with more by changing the setting below, however the frontend also wont let you create more than 2 so you would need to create the detector from the API.

This should help you create detectors with more than 2 categorical fields.

PUT _cluster/settings
{
“persistent”: {
“plugins.anomaly_detection.category_field_limit”: “3”
}
}

Regardless what were you envisioning regarding dynamically passing a data filter? Do you mean just that you don’t need to stop the detector when updating it?

This worked perfectly for me, thank you so much for your help!

Regarding “dynamically passing a data filter”, I did envision being able to update it without stopping the detector; but that was more so just to bypass the 2 categorical field limit that I did not know how to overcome.