Building an Anomaly Detection Model using Falkonry Insights¶
Creating a Baseline Model¶
How to create a univariate baseline anomaly detection model with:
- Select a numeric signal that has consistent data with good sampling rate (>100 mHz recommended)
- Identify the baseline normal behavior period (learning range) represented in the selected signal
- Run an ANOMALYLEARN flow. Once complete, review the output of the model.
- When the output contains gaps, it is likely that the input data has missing values or irregular sampling. Consider revising the learning range to select a period where there is more consistent data in the input signal.
- For lower latency change the aperture setting to something smaller (non-default). Consult Falkonry Experts before settling on a non-default aperture.
- Capture the Model ID from the flow response for the model that has satisfactory results
- Use the Signal ID and the Model ID to start live monitoring.
Revising an Anomaly Model¶
Coming Soon