kibana-anomaly-detection
Elastic ML anomaly detection — investigation/RCA, score explanation, job lifecycle troubleshooting, and job operations. Use when answering "what broke?"/"which entity?"/RCA, "why is score high/low?"/renormalization, "datafeed stopped"/"memory limit"/hard_limit, or configuring ML anomaly detection jobs. Reads results from .ml-anomalies-* and job state from ML REST APIs.
- Version
- 0.3.0
- Compatibility
- Elasticsearch 8.x–9.x or Elastic Cloud Serverless with ML anomaly detection; Kibana 8.x–9.x for saved-object context only
Pinned to revision 4e8964e24a5a, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/kibana-anomaly-detection/SKILL.md
- skills/kibana-anomaly-detection/references/README.md
- skills/kibana-anomaly-detection/references/agent-builder-companion.md
- skills/kibana-anomaly-detection/references/anomaly-detection-functions.md
- skills/kibana-anomaly-detection/references/investigation-queries.md
- skills/kibana-anomaly-detection/references/job-creation-recipes.md
- skills/kibana-anomaly-detection/references/observability-anomaly-expert.md
- skills/kibana-anomaly-detection/references/protocols/investigation.md
- skills/kibana-anomaly-detection/references/score-reference.md
- skills/kibana-anomaly-detection/references/security-anomaly-expert.md
- skills/kibana-anomaly-detection/references/troubleshooting-reference.md
- skills/kibana-anomaly-detection/references/worked-example.md
Every link opens the file at its source, pinned to the revision this page describes.