- Troubleshooting
- Resources
startree-mstl
Description
Detect an anomaly if the metric is outside the predicted boundaries of a MSTL decomposition model. Aggregation function with 1 operand: SUM, MAX,etc…
Flowchart

name | description | default value | |
---|---|---|---|
aggregationColumn |
| – | |
aggregationFunction | The aggregation function to apply on the aggregationColumn. Example:
| – | |
dataSource |
| – | |
dataset | The dataset to query. | – | |
monitoringGranularity |
| – | |
timezone | Timezone used to group by time. In TZ-identifier(opens in a new tab) format. For instance, | UTC | |
timeColumn |
| AUTO | |
timeColumnFormat | Required if timeColumn is not AUTO. Learn more(opens in a new tab) | ||
completenessDelay | The time for your data to be considered complete and ready for anomaly detection. In ISO-8601 format. Example: | P0D | |
queryFilters |
| ||
queryLimit |
| 100000001 |
name | description | default value | ||
---|---|---|---|---|
lookback |
| – | ||
| List of periods. In ISO-8601 format. For instance | – | ||
sensitivity | Multiplier of the estimated acceptable range, based on the standard deviation. The bigger, the fewer anomalies. 3 corresponds to the 3-sigma rule. | – | ||
lambda |
| – | ||
stlInnerIterations | For advanced users. Number of inner iterations in STL decomposition. | – | ||
stlRobustnessIterations | For advanced users. Number of robustness iterations in STL decomposition. | – | ||
confidenceRobustnessIterations | For advanced users. The bigger, the less confidence intervals are impacted by anomalies. | – | ||
|
| – | ||
pattern | Whether to detect an anomaly if it’s a drop, a spike or any of the two. | UP_OR_DOWN |
name | description | default value |
---|---|---|
daysOfWeek | Used to ignore anomalies that happen at specific time periods. A list of days. Anomalies happening on these days are ignored if timeOfWeekIgnore is true. Example: | [] |
hoursOfDay | Used to ignore anomalies that happen at specific time periods. A list of hours. Anomalies happening on these hours are ignored. Example: | [] |
dayHoursOfWeek | Used to ignore anomalies that happen at specific time periods. A mapping of
| {}
|
name | description | default value |
---|---|---|
thresholdFilterMin | Used to ignore anomalies that don’t meet the thresholdFilter min and max. Example: set | -1 |
thresholdFilterMax | Used to ignore anomalies that don’t meet the thresholdFilter min and max. Example: set | -1 |
name | description | default value |
---|---|---|
guardrailMetricMin | Used to ignore anomalies that don’t meet the guardrail threshold. Minimum threshold of the guardrail metric. If | -1 |
guardrailMetricMax
| Used to ignore anomalies that don’t meet the guardrail threshold. Maximum threshold of guardrailMetric. If | -1 |
guardrailMetric | Used to ignore anomalies that don’t meet the guardrail threshold. Metric to use as a threshold guardrail. Example: | COUNT(*) |
name | description | default value | ||
---|---|---|---|---|
offsetBaselineFilterPattern | Used to ignore anomalies that are not detected as anomalies by a simple model. Whether to detect an anomaly if it’s a drop, a spike or any of the two. | UP_OR_DOWN | ||
|
| -1 | ||
|
| ABSOLUTE | ||
offsetBaselineFilterModelOffsets | Used to ignore anomalies that are not detected as anomalies by a simple model. A list of offsets in ISO-8601 format to use as baseline. Eg | [‘P7D’] | ||
offsetBaselineFilterModelAggregation | Used to ignore anomalies that are not detected as anomalies by a simple model. The aggregation function to use to combine historical values. In | MEDIAN |
name | description | default value | |||
---|---|---|---|---|---|
eventFilterSqlFilter | Used to ignore anomalies that happen during events. Sql filter to apply on the events. Learn more | ||||
eventFilterLookaround | Used to ignore anomalies that happen during events. Offset to apply on startTime and endTime to look around the timeframe. In ISO-8601 format. Example: | P2D | |||
| Used to ignore anomalies that happen during events. List of event types to fetch by. Example: | [‘__NO_EVENTS’] | |||
eventFilterBeforeEventMargin | Used to ignore anomalies that happen during events. A period in ISO-8601 format that corresponds to a period that is also impacted by the event. Example: if beforeEventMargin is | P0D | |||
|
|
|
Impact
name | description | default value | |
---|---|---|---|
impactThreshold |
| -1 |
name | description | default value | |
---|---|---|---|
mutabilityPeriod | Use if your data is mutable. ThirdEye will maintain the detection results up to date on the mutable period. For instance, if your last 10 days of data is mutable, set | P0D | |
| For detection replay when data is mutable. If the percentage difference between an existing anomaly and a new anomaly on the same time frame is above this threshold, renotify. Combined with | -1 | |
reNotifyAbsoluteThreshold | For detection replay when data is mutable. If the absolute difference between an existing anomaly and a new anomaly on the same time frame is above this threshold, renotify. Combined with | -1 |
Anomaly merger
name | description | default value |
---|---|---|
mergeMaxGap | Maximum gap between 2 anomalies for anomalies to be merged. In ISO-8601 format. Example: | |
mergeMaxDuration | Maximum duration of an anomaly merger. At merge time, if an anomaly merger would get bigger than this limit, the anomalies are not merged. In ISO-8601 format. Example: |
RCA
name | description | default value |
---|---|---|
rcaAggregationFunction |
| |
rcaIncludedDimensions | List of the dimensions (columns in the dataset) to use in RCA drill-downs. If not set or empty, all dimensions of the table are used. Learn more(opens in a new tab). | [] |
rcaExcludedDimensions
| List of dimensions (columns in the dataset) to ignore in RCA drill-downs. If not set or empty, all dimensions of the table are used. rcaExcludedDimensions and rcaIncludedDimensions cannot be used at the same time. | [] |
rcaEventTypes | A list of type to filter on for RCA. Only events that match such types will be shown in the RCA related events tab. Learn more(opens in a new tab). | [] |
rcaEventSqlFilter | A Sql filter for RCA events. Only events that match the filter will be shown in the RCA related events tab. Learn more(opens in a new tab).
|