Get anomaly detection job stats
- GET /_ml/anomaly_detectors/{job_id}/_stats
- GET /_ml/anomaly_detectors/_stats
- Cluster privileges:
monitor_ml
Path Parameters
-
job_idstring Idoptional -
Identifier for the anomaly detection job. It can be a job identifier, a group name, a comma-separated list of jobs, or a wildcard expression. If you do not specify one of these options, the API returns information for all anomaly detection jobs.
Leave it out to use
/_ml/anomaly_detectors/_stats.
Query Parameters
-
allow_no_matchboolean · default: true Specifies what to do when the request:
- Contains wildcard expressions and there are no jobs that match.
- Contains the _all string or no identifiers and there are no matches.
- Contains wildcard expressions and there are only partial matches.
If
true, the API returns an emptyjobsarray when there are no matches and the subset of results when there are partial matches. Iffalse, the API returns a404status code when there are no matches or only partial matches.
Response
-
countnumberrequired -
jobsJobStatsrequired -
assignment_explanationstring -
For open anomaly detection jobs only, contains messages relating to the selection of a node to run the job.
-
data_countsDataCountsrequired -
An object that describes the quantity of input to the job and any related error counts. The
data_countvalues are cumulative for the lifetime of a job. If a model snapshot is reverted or old results are deleted, the job counts are not reset. -
bucket_countnumberrequired -
earliest_record_timestampnumber -
empty_bucket_countnumberrequired -
input_bytesnumberrequired -
input_field_countnumberrequired -
input_record_countnumberrequired -
invalid_date_countnumberrequired -
job_idstring Idrequired -
last_data_timenumber -
latest_record_timestampnumber -
latest_bucket_timestampnumber -
log_timenumber -
missing_field_countnumberrequired -
out_of_order_timestamp_countnumberrequired -
processed_field_countnumberrequired -
processed_record_countnumberrequired -
sparse_bucket_countnumberrequired -
forecasts_statsJobForecastStatisticsrequired -
An object that provides statistical information about forecasts belonging to this job. Some statistics are omitted if no forecasts have been made.
-
memory_bytesJobStatistics -
processing_time_msJobStatistics -
recordsJobStatistics -
statusmap string to number -
totalnumberrequired -
forecasted_jobsnumberrequired -
job_idstringrequired -
Identifier for the anomaly detection job.
-
model_size_statsModelSizeStatsrequired -
An object that provides information about the size and contents of the model.
-
bucket_allocation_failures_countnumberrequired -
job_idstring Idrequired -
log_timeDateTimerequired -
memory_statusMemoryStatusrequired -
Values:
oksoft_limithard_limit -
model_bytesnumber | string ByteSizerequired -
model_bytes_exceedednumber | string ByteSize -
model_bytes_memory_limitnumber | string ByteSize -
output_memory_allocator_bytesnumber | string ByteSize -
peak_model_bytesnumber | string ByteSize -
assignment_memory_basisstring -
result_typestringrequired -
total_by_field_countnumberrequired -
total_over_field_countnumberrequired -
total_partition_field_countnumberrequired -
categorization_statusCategorizationStatusrequired -
Values:
okwarn -
categorized_doc_countnumberrequired -
dead_category_countnumberrequired -
failed_category_countnumberrequired -
frequent_category_countnumberrequired -
rare_category_countnumberrequired -
total_category_countnumberrequired -
timestampnumber -
open_timeDateTime -
For open jobs only, the elapsed time for which the job has been open.
-
stateJobStaterequired -
The status of the anomaly detection job, which can be one of the following values:
closed,closing,failed,opened,opening.Supported values include:
closing: The job close action is in progress and has not yet completed. A closing job cannot accept further data.closed: The job finished successfully with its model state persisted. The job must be opened before it can accept further data.opened: The job is available to receive and process data.failed: The job did not finish successfully due to an error. This situation can occur due to invalid input data, a fatal error occurring during the analysis, or an external interaction such as the process being killed by the Linux out of memory (OOM) killer. If the job had irrevocably failed, it must be force closed and then deleted. If the datafeed can be corrected, the job can be closed and then re-opened.opening: The job open action is in progress and has not yet completed.
-
Values:
closingclosedopenedfailedopening -
timing_statsJobTimingStatsrequired -
An object that provides statistical information about timing aspect of this job.
-
average_bucket_processing_time_msDurationValueUnitFloatMillis -
bucket_countnumberrequired -
exponential_average_bucket_processing_time_msDurationValueUnitFloatMillis -
exponential_average_bucket_processing_time_per_hour_msDurationValueUnitFloatMillisrequired -
job_idstring Idrequired -
total_bucket_processing_time_msDurationValueUnitFloatMillisrequired -
maximum_bucket_processing_time_msDurationValueUnitFloatMillis -
minimum_bucket_processing_time_msDurationValueUnitFloatMillis -
deletingboolean -
Indicates that the process of deleting the job is in progress but not yet completed. It is only reported when
true.