2017-12-08 12:07:14 -05:00
|
|
|
[[ml-jobs]]
|
2018-02-19 13:38:38 -05:00
|
|
|
=== Machine Learning Jobs
|
|
|
|
++++
|
|
|
|
<titleabbrev>Jobs</titleabbrev>
|
|
|
|
++++
|
2017-12-08 12:07:14 -05:00
|
|
|
|
|
|
|
Machine learning jobs contain the configuration information and metadata
|
2018-02-19 13:38:38 -05:00
|
|
|
necessary to perform an analytics task.
|
2017-12-08 12:07:14 -05:00
|
|
|
|
2018-02-19 13:38:38 -05:00
|
|
|
Each job has one or more _detectors_. A detector applies an analytical function
|
|
|
|
to specific fields in your data. For more information about the types of
|
|
|
|
analysis you can perform, see <<ml-functions>>.
|
2017-12-08 12:07:14 -05:00
|
|
|
|
2018-02-19 13:38:38 -05:00
|
|
|
A job can also contain properties that affect which types of entities or events
|
|
|
|
are considered anomalous. For example, you can specify whether entities are
|
|
|
|
analyzed relative to their own previous behavior or relative to other entities
|
|
|
|
in a population. There are also multiple options for splitting the data into
|
|
|
|
categories and partitions. Some of these more advanced job configurations
|
|
|
|
are described in the following section: <<ml-configuring>>.
|
2017-12-08 12:07:14 -05:00
|
|
|
|
2018-02-19 13:38:38 -05:00
|
|
|
For a description of all the job properties, see
|
|
|
|
{ref}/ml-job-resource.html[Job Resources].
|
2017-12-08 12:07:14 -05:00
|
|
|
|
2018-02-19 13:38:38 -05:00
|
|
|
In {kib}, there are wizards that help you create specific types of jobs, such
|
|
|
|
as _single metric_, _multi-metric_, and _population_ jobs. A single metric job
|
|
|
|
is just a job with a single detector and limited job properties. To have access
|
|
|
|
to all of the job properties in {kib}, you must choose the _advanced_ job wizard.
|
|
|
|
If you want to try creating single and multi-metrics jobs in {kib} with sample
|
|
|
|
data, see <<ml-getting-started>>.
|
|
|
|
|
|
|
|
You can also optionally assign jobs to one or more _job groups_. You can use
|
|
|
|
job groups to view the results from multiple jobs more easily and to expedite
|
|
|
|
administrative tasks by opening or closing multiple jobs at once.
|