elastic / elastic/observability-migration-platform

[Datadog] Seasonality-Aware Anomaly Detection

Open
#2 0 comments 0 reactions 0 assignees View on GitHub
asset:alerts capabilities phase:6 source:datadog workstream:asset-coverage
Dominant language
Python
Stars
6
Forks
8
Avg merge
2d 22h
Merged PRs (30d)
23

Description

This query uses Datadog’s proprietary anomalies() function, which applies a seasonal trend decomposition. Recreating this in Elastic requires configuring a specific Machine Learning (ML) job, as standard Elastic alerts don't handle triple-exponential smoothing natively within a simple query.

```json
{
"name": "Seasonal Anomaly: Checkout Latency",
"type": "query alert",
"query": "avg(last_4h):anomalies(avg:ecommerce.checkout.latency{env:prod}, 'agile', 2, direction='both', alert_window='last_15m', interval=60, count_default_zero='true') >= 1",
"message": "Checkout latency is deviating from historical weekly patterns. @ops-team",
"options": {
"thresholds": { "critical": 1 }
}
}
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.