From 51f348605cb8f03bb6845bc1dd9b34e2f936855c Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Thu, 25 Jul 2024 11:08:46 +0200 Subject: [PATCH] [ML] Add explanation of typical location (#2753) (#2754) (cherry picked from commit ffe6cd0ad7c17c3d1de2525fdcc0ad2a71c66c13) Co-authored-by: Valeriy Khakhutskyy <1292899+valeriy42@users.noreply.github.com> --- .../stack/ml/anomaly-detection/geographic-anomalies.asciidoc | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/docs/en/stack/ml/anomaly-detection/geographic-anomalies.asciidoc b/docs/en/stack/ml/anomaly-detection/geographic-anomalies.asciidoc index 02bcae275..99f52ff3f 100644 --- a/docs/en/stack/ml/anomaly-detection/geographic-anomalies.asciidoc +++ b/docs/en/stack/ml/anomaly-detection/geographic-anomalies.asciidoc @@ -211,6 +211,11 @@ behavior: image::images/ecommerce-anomaly-explorer-geopoint.jpg[A screenshot of an anomalous event in the eCommerce data in Anomaly Explorer] // NOTE: This is an autogenerated screenshot. Do not edit it directly. +A "typical" value indicates a centroid of a cluster of previously observed +locations that is closest to the "actual" location at that time. For example, +there may be one centroid near the user's home and another near the user's +work place since there are many records associated with these distinct locations. + Likewise, there are time periods in the web logs sample data where there are both unusually high sums of data transferred and unusual geographical coordinates: