|
In Traffic logs(SLS) when we detect anomalous rise in session failure due to [
Session End Reason = 'resources-unavailable' ] in 15 minutes A minimum threshold
of 100 sessions should fail before raising this incident OR we should have a
moving average baseline of sessions failing with this reason and the anomaly
detection should be beyond the moving average
|