Instantiates a job.
PUT _ml/anomaly_detectors/<job_id>
job_id
(required)
analysis_config
analysis_limits
background_persist_interval
custom_settings
data_description
(required)
{}
). See data description objects.
description
groups
model_plot_config
model_snapshot_retention_days
1
, which means snapshots
are retained for one day (twenty-four hours).
renormalization_window_days
results_index_name
shared
, which generates an index named .ml-anomalies-shared
.
results_retention_days
You must have manage_ml
, or manage
cluster privileges to use this API.
For more information, see
Security Privileges.
The following example creates the total-requests
job:
PUT _ml/anomaly_detectors/total-requests { "description" : "Total sum of requests", "analysis_config" : { "bucket_span":"10m", "detectors": [ { "detector_description": "Sum of total", "function": "sum", "field_name": "total" } ] }, "data_description" : { "time_field":"timestamp", "time_format": "epoch_ms" } }
When the job is created, you receive the following results:
{ "job_id": "total-requests", "job_type": "anomaly_detector", "job_version": "7.0.0-alpha1", "description": "Total sum of requests", "create_time": 1517011406091, "analysis_config": { "bucket_span": "10m", "detectors": [ { "detector_description": "Sum of total", "function": "sum", "field_name": "total", "detector_index": 0 } ], "influencers": [] }, "analysis_limits": { "model_memory_limit": "1024mb", "categorization_examples_limit": 4 }, "data_description": { "time_field": "timestamp", "time_format": "epoch_ms" }, "model_snapshot_retention_days": 1, "results_index_name": "shared" }