Plan your analysis
Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud. Availability This functionality is generally available and ready for production usage. Serverless interfaces and procedures might differ from classic Elastic Stack deployments. The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability This functionality is generally available and ready for production usage. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.
Serverless
Generally available
Stack
Generally available
The machine learning features in Elastic Stack enable you to seek anomalies in your data in many different ways. Using proprietary machine learning algorithms, the following circumstances are detected:
- Anomalies related to temporal deviations in values, counts, or frequencies
- Anomalies related to unusual locations in geographic data
- Statistical rarity
- Unusual behaviors for a member of a population
Automated periodicity detection and quick adaptation to changing data ensure that you don’t need to specify algorithms, models, or other data science-related configurations in order to get the benefits of machine learning.
When you are deciding which type of anomaly detection to use, the most important considerations are the data sets that you have available and the type of behavior you want to detect.
If you are uncertain where to begin, Kibana can recognize certain types of data and suggest useful anomaly detection jobs. Likewise, some Elastic Agent integrations include anomaly detection job configuration information, dashboards, searches, and visualizations that are customized to help you analyze your data.
For the full list of functions that you can use in your anomaly detection jobs, see Function reference. For a list of the preconfigured jobs, see Supplied configurations.