honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[DOCS] Add Anomaly Explorer limitation re scripted fields (elastic/x-pack-elasticsearch#1676) 

* [DOCS] Add Anomaly Explorer limitation re scripted fields

* [DOCS] Update Anomaly Explorer limitation re scripted fields

Original commit: elastic/x-pack-elasticsearch@7c9971ada0
This commit is contained in:
Lisa Cawley 2017-06-16 15:40:30 -07:00 committed by lcawley
parent 1559f85c73
commit b7d4600c3c
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
docs/en/ml/limitations.asciidoc
View File

@ -33,13 +33,17 @@ see {ref}/modules-cross-cluster-search.html[Cross Cluster Search].
[float] [float]
=== Anomaly Explorer omissions and limitations === Anomaly Explorer omissions and limitations
//See x-pack-elasticsearch/#844 //See x-pack-elasticsearch/#844 and x-pack-kibana/#1461
In Kibana, Anomaly Explorer charts are not displayed for anomalies In {kib}, Anomaly Explorer charts are not displayed for anomalies
that were due to categorization, `time_of_day` functions, or `time_of_week` that were due to categorization, `time_of_day` functions, or `time_of_week`
functions. Those particular results do not display well as time series functions. Those particular results do not display well as time series
charts. charts.
The charts are also not displayed for detectors that use script fields. In that
case, the original source data cannot be easily searched because it has been
somewhat transformed by the script.
The Anomaly Explorer charts can also look odd in circumstances where there The Anomaly Explorer charts can also look odd in circumstances where there
is very little data to plot. For example, if there is only one data point, it is is very little data to plot. For example, if there is only one data point, it is
represented as a single dot. If there are only two data points, they are joined represented as a single dot. If there are only two data points, they are joined