Some problem in anomly detecting plugin

I am a zoom employee. Recently I want to use anomly detecting plugin to data analysis.I meet some
problems hope someone can answer me。

1.Anomly Detecting Plugin always in initializing state. The anomly detecting plugin prompts “Attempting to initialize the detector with historical data. This initializing process takes approximately 32 minutes”. But I waited for a day ,it still in initializing state

  1. When I configure trigger for anomly detecting,It prompt “No features have been added to this anomaly detector. A feature is a metric that is used for anomaly detection. A detector can discover anomalies across one or more features”. But this anomly detecting already has an enabled feature. I find “Insufficient data for preview results. Minimum required: 400” error in log.
    I don’t know the meaning.

3.I am monitoring the errorconut data. Is there a way to prevent the sudden drop of data from triggering the alarm and only the sudden rise of the data to trigger the alarm?

4.Whether the Anomly Detecting plugin contains this type of parameters, such as the alarm when the current detection data rises to a certain value compared to the last time (or baseline data). Because I found that sometimes the data has risen a lot before calling the police

this is my data

this is my anomly detecting plugin configurations

1.Anomly Detecting Plugin always in initializing state. The anomly detecting plugin prompts “Attempting to initialize the detector with historical data. This initializing process takes approximately 32 minutes”. But I waited for a day ,it still in initializing state.

We need to change the wording to emphasize the estimate time depends on the data availability. From the dashboard, I saw your data comes every hour. What’s the detector interval?

When I configure trigger for anomly detecting,It prompt “No features have been added to this anomaly detector. A feature is a metric that is used for anomaly detection. A detector can discover anomalies across one or more features”. But this anomly detecting already has an enabled feature. I find “Insufficient data for preview results. Minimum required: 400” error in log.
I don’t know the meaning.

For trigger, do you mean alerting trigger or sth else? Could you post a screenshot when you configure the trigger?

“Insufficient data for preview results. Minimum required: 400” means you don’t have sufficient data. We need at least 400 consecutive data points to finish training.

I am monitoring the errorconut data. Is there a way to prevent the sudden drop of data from triggering the alarm and only the sudden rise of the data to trigger the alarm?

We don’t. I created an github issue to track it: https://github.com/opensearch-project/anomaly-detection/issues/616

4.Whether the Anomly Detecting plugin contains this type of parameters, such as the alarm when the current detection data rises to a certain value compared to the last time (or baseline data). Because I found that sometimes the data has risen a lot before calling the police

You meant you want the alarm triggered when we reach the threshold no matter what anomaly detection thinks?

Thanks for your reply,after discussion within the team.We decide to use your own algorithm