ee-outliers

ee-outliers copied to clipboard

Use this to exclude for example following alert: `Windows user scar causing failed logons on 2 hosts `

daanraman

daanraman

optimize outliers whitelisting by FIRST checking the outliers dictionary and then all the other fields

1

daanraman

detobel36

Add possiblity to specify a list of elasticsearch node instead of one

2

Currently, outliers can connect to only one node from the cluster. Outliers actually relies on elasticsearch which is a distributed system meaning some of its part can fail but the...

olivierbuez

support target value transformations such as to_lowercase

1

daanraman

https://en.wikipedia.org/wiki/Local_outlier_factor

daanraman

SeLeCt * FrOm...

daanraman

Verify that pct_of_average and other trigger methods actually takes into account the total number of hits for each bucket

1

Example: 20 x numerical value (10) + 1 x numerical value (1) should actually calculate the average of (20x10 + 1), not (10+1) Check if this is actually the case

daanraman

daanraman