[DOCS] Documents AIOps Labs enhancements (#157716)

Co-authored-by: Dima Arnautov <arnautov.dima@gmail.com>
This commit is contained in:
István Zoltán Szabó 2023-05-15 17:22:16 +02:00 committed by GitHub
parent aefd6356a8
commit e6bec5b669
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
4 changed files with 26 additions and 15 deletions

Binary file not shown.

After

Width:  |  Height:  |  Size: 599 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 620 KiB

After

Width:  |  Height:  |  Size: 399 KiB

Before After
Before After

Binary file not shown.

Before

Width:  |  Height:  |  Size: 142 KiB

After

Width:  |  Height:  |  Size: 483 KiB

Before After
Before After

View file

@ -130,10 +130,12 @@ the spike and displays them in a table. You can optionally choose to summarize
the results into groups. The table also shows an indicator of the level of
impact and a sparkline showing the shape of the impact in the chart. Hovering
over a row displays the impact on the histogram chart in more detail. You can
inspect a field in **Discover** by selecting this option under the **Actions**
column. You can also pin a table row by clicking on it then move the cursor to
the histogram chart. It displays a tooltip with exact count values for the
pinned field which enables closer investigation.
inspect a field in **Discover**, further investiage in **Log pattern analysis**,
or copy the table row information as a query filter to the clipboard by
selecting the corresponding option under the **Actions** column. You can also
pin a table row by clicking on it then move the cursor to the histogram chart.
It displays a tooltip with exact count values for the pinned field which enables
closer investigation.
Brushes in the chart show the baseline time range and the deviation in the
analyzed data. You can move the brushes to redefine both the baseline and the
@ -156,7 +158,8 @@ displays them together with a chart that shows the distribution of each category
and an example document that matches the category.
You can find log pattern analysis under **{ml-app}** > **AIOps Labs** where you
can select the {data-source} or saved search that you want to analyze.
can select the {data-source} or saved search that you want to analyze, or in
**Discover** as an available action for any text field.
[role="screenshot"]
image::user/ml/images/ml-log-pattern-analysis.png[Log pattern analysis UI]
@ -187,14 +190,22 @@ image::user/ml/images/ml-change-point-detection.png[Change point detection UI]
Select a function and a metric field, then pick a date range to start detecting
change points in the defined range. Optionally, you can split the data by a
field. If the cardinality of the split field is greater than 10,000, then only
the first 10,000, sorted by document count, are analyzed.
field. If the cardinality of the split field exceeds 10,000, then only the first
10,000, sorted by document count, are analyzed. You can configure a maximum of 6
combinations of a function applied to a metric field, partitioned by a split
field to identify change points.
If a change point is detected, a chart visualizes where the change point was identified in
the time window analyzed, making the interpretation easier. If you split the analysis by a
field, a separate chart is displayed for every partition with a detected change
point. You can view the type of change point in the chart as well as its value
and the time when the change happened. The corresponding `p-value` indicates how
extreme the change is; lower values mark more significant changes. You can use
the change point type selector to filter the results by specific types of change
points.
When a change point is detected, a row displays basic information including the
timestamp of the change point, a preview chart, the type of change point, its
p-value, the name and value of the split field. You can further examine the
selected change point in a detailed view. A chart visualizes the identified
change point within the analyzed time window, making the interpretation easier.
If the analysis is split by a field, a separate chart is shown for every
partition that has a detected change point. The chart displays the type of
change point, its value, and the timestamp of the bucket where the change point
has been detected. The corresponding `p-value` indicates the magnitude of the
change; lower values indicate more significant changes. You can use the change
point type selector to filter the results by specific types of change points.
[role="screenshot"]
image::user/ml/images/ml-change-point-detection-selected.png[Selected change points]