View anomaly alert metric data on the preview panel in Express List
View visualizations for anomaly alerts to investigate anomalies using metric data. You can view visualizations from the Express List preview panel or the alert record.
Before you begin
Role required: evt_mgmt_operator, evt_mgmt_admin
Procedure
Navigate to Workspaces > Service Operations Workspace.
From the navigation bar, select the Express list icon
No alternative text supplied
.
In the Active alerts list, locate an anomaly alert.
Information in the Description column can help you determine which alerts are anomaly alerts. For example, an alert description might warn about values nearing or exceeding configured thresholds, or metrics above or below a defined boundary.
Choose where to view the anomaly chart.
| Option | Procedure |
|---|---|
| To view the chart in the preview panel |
A chart with a visual representation of the anomaly appears. |
| To view the chart in the alert record | Select the number of the anomaly alert to open the alert record. The Overview tab opens by default. The anomaly chart is displayed. |
Depending on how the metric anomaly is configured, one of two charts is displayed.
- When the Metric Intelligence statistical model is used to detect anomalies, the anomaly alert chart is displayed with upper and lower bounds based on machine learning models.
Anomaly alert graph
For more information, see [Understanding Metric Intelligence](../metric-intelligence/operational-intelligence-overview.md).
- When thresholds are configured by administrators, the static threshold metric anomaly alert chart shows anomalies defined using the configured thresholds.
Static threshold metric anomaly alert graph
**Note:**
The raw data used for the metric chart in the preview panel is available only for seven days. If older alerts are selected and the raw data is no longer available, a chart isn’t shown.
For more information, see [Create metric rules](../metric-intelligence/create-metric-rules.md).
- Review surrounding metric data by selecting the Open in Metric explorer icon (
Open in Metric explorer icon\) in the information panel.
The **Metric Explorer** tab displays the time frame of the anomaly. For an open alert, the chart shows one hour before and after the last time of event generation. For a closed alert, the chart shows one hour before and after the first event that created an alert. If there’s no data, the chart isn’t displayed.
For more information, see [Metric Explorer](../metric-intelligence/agent-workspace-ops-intelligence.md).