[DOCS] Add categorization limitation (elastic/x-pack-elasticsearch#3022)

Original commit: elastic/x-pack-elasticsearch@387d7cf939
This commit is contained in:
Lisa Cawley 2017-11-16 10:00:40 -08:00 committed by lcawley
parent 5efdb54eb8
commit 37c29a4006
2 changed files with 16 additions and 4 deletions

View File

@ -11,10 +11,15 @@ example:
//NOTCONSOLE //NOTCONSOLE
You can use {ml} to observe the static parts of the message, cluster similar You can use {ml} to observe the static parts of the message, cluster similar
messages together, and classify them into message categories. The {ml} model messages together, and classify them into message categories.
learns what volume and pattern is normal for each category over time. You can
then detect anomalies and surface rare events or unusual types of messages by NOTE: Categorization uses English tokenization rules and dictionary words in
using count or rare functions. For example: order to identify log message categories. As such, only English language log
messages are supported.
The {ml} model learns what volume and pattern is normal for each category over
time. You can then detect anomalies and surface rare events or unusual types of
messages by using count or rare functions. For example:
//Obtained from it_ops_new_app_logs.sh //Obtained from it_ops_new_app_logs.sh
[source,js] [source,js]

View File

@ -4,6 +4,13 @@
The following limitations and known problems apply to the {version} release of The following limitations and known problems apply to the {version} release of
{xpack}: {xpack}:
[float]
=== Categorization uses English tokenization rules and dictionary words
//See x-pack-elasticsearch/#3021
Categorization identifies static parts of unstructured logs and groups similar
messages together. This is currently supported only for English language log
messages.
[float] [float]
=== Pop-ups must be enabled in browsers === Pop-ups must be enabled in browsers
//See x-pack-elasticsearch/#844 //See x-pack-elasticsearch/#844