Configure an advanced anomaly detector

  • How-to guide
  • 3min
  • Published Apr 10, 2024

Latest Dynatrace

Davis Anomaly Detection - new Davis Anomaly Detection allows you to create anomaly detectors, set up customized alerts, and transform metric events configuration. You can also save time and create an anomaly detector in Notebooks Notebooks while using the app.

Create an advanced anomaly detector

Prerequisites

To use the latest version of Davis Anomaly Detection - new Davis Anomaly Detection, you need to have appropriate permissions. For more information, see Davis Anomaly Detection app overview.

Create or edit an advanced anomaly detector

To manually create an advanced Anomaly Detection configuration

  1. Go to Davis Anomaly Detection - new Davis Anomaly Detection.

  2. Select Add Anomaly Detector > Create your own Anomaly Detector to create a new anomaly detector. To edit an existing anomaly detector, select any anomaly detector from the list.

  3. Go to the Advanced tab and expand Set scope.

  4. In Query, provide the DQL query to fetch your data.

    We recommend that you use the interval: 1m parameter to ensure proper data resolution for the analysis.

  5. Set Actor to a service user or regular user.

    By default, after editing the anomaly detector's configuration, the actor changes to the user who updated it. You will get a warning message confirming whether you want to overwrite the existing configuration or make a copy of the anomaly detector with your changes.

    If the anomaly detector was created with a service user and you have permission to use the service user, you can update the configuration without overwriting the service user actor; otherwise, you'll get a warning about restricted service user access.

  6. Expand Define alert condition.

  7. Define the analyzer in Select use case set its parameters in Set a condition. For details, see Analyzer type and parameters.

  8. optional Select Preview to see a demonstration of your alert condition.

  9. Expand Add details.

  10. In General information, set a Title and Description for your anomaly detector.

  11. In Create event template, configure the event triggered by the configuration. For details, see Event template.

  12. Select Create to create a simple anomaly detector or select Save to update your configuration.

Whenever you Create or Save your anomaly detector, its configuration gets automatically validated. If the there's no errors present in your configuration, you'll be able to save or update your configuration. If there are any errors, the section will be highlighted with red and marked with Error message under the section title.

Check the Status of the new configuration shortly after creation to ensure there are no errors in the execution.

Create an advanced anomaly detector in Notebooks

With Davis for Notebooks, you can preview your Anomaly Detection configuration and evaluate its effectiveness. This option takes you to Notebooks Notebooks, where you configure the query and monitoring strategy, and then back to Davis Anomaly Detection - new Davis Anomaly Detection to create an event template.

  1. Go to Davis Anomaly Detection - new Davis Anomaly Detection.
  2. Select Add Anomaly Detector > Anomaly Detector in Notebooks.
  3. Select a notebook in which you want to preview your configuration.
    This action takes you to Notebooks Notebooks.
  4. Add a new DQL or Metrics section and query the data you're interested in.

    For a DQL query, we recommend that you use the interval: 1m parameter to ensure proper data resolution for the analysis.

  5. Select Options > Davis AI.
  6. Activate the analyzer.
  7. Select the required analyzer and configure it. For details, see Anomaly detection configuration.
  8. Select Run analysis.
  9. Once you're satisfied with the result, select More actions > Open with Open with and select Davis Anomaly Detection.
    This action takes you back to Davis Anomaly Detection - new Davis Anomaly Detection.
  10. Go to the Advanced tab and expand Add details.
  11. In General information, set a Title and Description for your anomaly detector. You can use Markdown for anomaly detector description.
  12. In Create event template, configure the event triggered by the configuration. For details, see Event template.
  13. Select Create.

    Check the Status of the new configuration shortly after creation to ensure there are no errors in the execution.