-
Notifications
You must be signed in to change notification settings - Fork 8.5k
Closed
Labels
Feature:Logs UILogs UI featureLogs UI featureTeam:Infra Monitoring UI - DEPRECATEDDEPRECATED - Label for the Infra Monitoring UI team. Use Team:obs-ux-infra_servicesDEPRECATED - Label for the Infra Monitoring UI team. Use Team:obs-ux-infra_servicesv7.6.0
Description
Summary
Following the investigation in #46610 the categorization can probably be handled using a single ML job.
Job results
The following result data structures could be attributed to a partition:
- the anomaly
record - the
model_plotwith the actual count per bucket and partition
A few result data structures would be shared between the partitions:
- the
bucket - the
categorywith its examples
Acceptance criteria
- A new ML module
logs_ui_entry_categorizationwith one job and one datafeed exists. - The job is a categorization job with...
- a
categorization_field_nameset tomessage. - a
countdetector with theby_field_nameset tomlcategoryandpartition_field_nameset toevent.dataset. - a
bucket_spanof 15 minutes. - the model plot enabled.
- a
- The datafeed for the job...
- filters the documents for the existence of a
messagefield.
- filters the documents for the existence of a
Metadata
Metadata
Assignees
Labels
Feature:Logs UILogs UI featureLogs UI featureTeam:Infra Monitoring UI - DEPRECATEDDEPRECATED - Label for the Infra Monitoring UI team. Use Team:obs-ux-infra_servicesDEPRECATED - Label for the Infra Monitoring UI team. Use Team:obs-ux-infra_servicesv7.6.0