Opensearch Anomaly Detection behavior

[McJava1967]

Hi. I am also evaluating OS Anomaly Detection, and I’m certainly not an expert. But I’ve run the same test you describe, and got the same result.

The reason you get no anomaly is because the detector is getting NO DATA. Null, in other words–not zero.

I am also struggling with this behavior. I’ve posted a similar question here, with no responses yet:

Do missing buckets ruin anomaly detection?

Hi all. I’m testing Elastic Stack and OpenSearch to see if Anomaly Detection will work for my company. The Elastic Stack (paid) version clearly worked out of the box. However, the OS version seems to barely work at all. Could anyone help me? I suspect the problem is that OS Anomaly Detection really can’t handle it when data is missing (or sparse). If so, I need to find a way around this problem, or abandon OS altogether. I set up a test case by pulling data from a database with the JDBC c…

Good luck to both of us!