mirror of
https://github.com/elastic/kibana.git
synced 2025-04-23 17:28:26 -04:00
[DOCS] Documents AIOps Labs enhancements (#157716)
Co-authored-by: Dima Arnautov <arnautov.dima@gmail.com>
This commit is contained in:
parent
aefd6356a8
commit
e6bec5b669
4 changed files with 26 additions and 15 deletions
BIN
docs/user/ml/images/ml-change-point-detection-selected.png
Normal file
BIN
docs/user/ml/images/ml-change-point-detection-selected.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 599 KiB |
Binary file not shown.
Before Width: | Height: | Size: 620 KiB After Width: | Height: | Size: 399 KiB |
Binary file not shown.
Before Width: | Height: | Size: 142 KiB After Width: | Height: | Size: 483 KiB |
|
@ -130,10 +130,12 @@ the spike and displays them in a table. You can optionally choose to summarize
|
|||
the results into groups. The table also shows an indicator of the level of
|
||||
impact and a sparkline showing the shape of the impact in the chart. Hovering
|
||||
over a row displays the impact on the histogram chart in more detail. You can
|
||||
inspect a field in **Discover** by selecting this option under the **Actions**
|
||||
column. You can also pin a table row by clicking on it then move the cursor to
|
||||
the histogram chart. It displays a tooltip with exact count values for the
|
||||
pinned field which enables closer investigation.
|
||||
inspect a field in **Discover**, further investiage in **Log pattern analysis**,
|
||||
or copy the table row information as a query filter to the clipboard by
|
||||
selecting the corresponding option under the **Actions** column. You can also
|
||||
pin a table row by clicking on it then move the cursor to the histogram chart.
|
||||
It displays a tooltip with exact count values for the pinned field which enables
|
||||
closer investigation.
|
||||
|
||||
Brushes in the chart show the baseline time range and the deviation in the
|
||||
analyzed data. You can move the brushes to redefine both the baseline and the
|
||||
|
@ -156,7 +158,8 @@ displays them together with a chart that shows the distribution of each category
|
|||
and an example document that matches the category.
|
||||
|
||||
You can find log pattern analysis under **{ml-app}** > **AIOps Labs** where you
|
||||
can select the {data-source} or saved search that you want to analyze.
|
||||
can select the {data-source} or saved search that you want to analyze, or in
|
||||
**Discover** as an available action for any text field.
|
||||
|
||||
[role="screenshot"]
|
||||
image::user/ml/images/ml-log-pattern-analysis.png[Log pattern analysis UI]
|
||||
|
@ -187,14 +190,22 @@ image::user/ml/images/ml-change-point-detection.png[Change point detection UI]
|
|||
|
||||
Select a function and a metric field, then pick a date range to start detecting
|
||||
change points in the defined range. Optionally, you can split the data by a
|
||||
field. If the cardinality of the split field is greater than 10,000, then only
|
||||
the first 10,000, sorted by document count, are analyzed.
|
||||
field. If the cardinality of the split field exceeds 10,000, then only the first
|
||||
10,000, sorted by document count, are analyzed. You can configure a maximum of 6
|
||||
combinations of a function applied to a metric field, partitioned by a split
|
||||
field to identify change points.
|
||||
|
||||
If a change point is detected, a chart visualizes where the change point was identified in
|
||||
the time window analyzed, making the interpretation easier. If you split the analysis by a
|
||||
field, a separate chart is displayed for every partition with a detected change
|
||||
point. You can view the type of change point in the chart as well as its value
|
||||
and the time when the change happened. The corresponding `p-value` indicates how
|
||||
extreme the change is; lower values mark more significant changes. You can use
|
||||
the change point type selector to filter the results by specific types of change
|
||||
points.
|
||||
When a change point is detected, a row displays basic information including the
|
||||
timestamp of the change point, a preview chart, the type of change point, its
|
||||
p-value, the name and value of the split field. You can further examine the
|
||||
selected change point in a detailed view. A chart visualizes the identified
|
||||
change point within the analyzed time window, making the interpretation easier.
|
||||
If the analysis is split by a field, a separate chart is shown for every
|
||||
partition that has a detected change point. The chart displays the type of
|
||||
change point, its value, and the timestamp of the bucket where the change point
|
||||
has been detected. The corresponding `p-value` indicates the magnitude of the
|
||||
change; lower values indicate more significant changes. You can use the change
|
||||
point type selector to filter the results by specific types of change points.
|
||||
|
||||
[role="screenshot"]
|
||||
image::user/ml/images/ml-change-point-detection-selected.png[Selected change points]
|
Loading…
Add table
Add a link
Reference in a new issue