Generating alerts for anomaly detection jobs

Kibana {alert-features} include support for machine learning rules, which run scheduled checks for anomalies in one or more anomaly detection jobs or check the health of the job with certain conditions. If the conditions of the rule are met, an alert is created and the associated action is triggered. For example, you can create a rule to check an anomaly detection job every fifteen minutes for critical anomalies and to notify you in an email. To learn more about Kibana {alert-features}, refer to Alerting.

The following machine learning rules are available:

Anomaly detection alert

Checks if the anomaly detection job results contain anomalies that match the rule conditions.

Anomaly detection jobs health

Monitors job health and alerts if an operational issue occurred that may prevent the job from detecting anomalies.

Tip

If you have created rules for specific anomaly detection jobs and you want to monitor whether these jobs work as expected, anomaly detection jobs health rules are ideal for this purpose.

In Stack Management > Rules, you can create both types of machine learning rules. In the Machine Learning app, you can create only anomaly detection alert rules; create them from the anomaly detection job wizard after you start the job or from the anomaly detection job list.