Close anomaly detection jobs Added in 5.4.0
A job can be opened and closed multiple times throughout its lifecycle. A closed job cannot receive data or perform analysis operations, but you can still explore and navigate results. When you close a job, it runs housekeeping tasks such as pruning the model history, flushing buffers, calculating final results and persisting the model snapshots. Depending upon the size of the job, it could take several minutes to close and the equivalent time to re-open. After it is closed, the job has a minimal overhead on the cluster except for maintaining its meta data. Therefore it is a best practice to close jobs that are no longer required to process data. If you close an anomaly detection job whose datafeed is running, the request first tries to stop the datafeed. This behavior is equivalent to calling stop datafeed API with the same timeout and force parameters as the close job request. When a datafeed that has a specified end date stops, it automatically closes its associated job.
Path parameters
-
Identifier for the anomaly detection job. It can be a job identifier, a group name, or a wildcard expression. You can close multiple anomaly detection jobs in a single API request by using a group name, a comma-separated list of jobs, or a wildcard expression. You can close all jobs by using
_all
or by specifying*
as the job identifier.
Query parameters
-
allow_no_match boolean
Specifies what to do when the request: contains wildcard expressions and there are no jobs that match; contains the
_all
string or no identifiers and there are no matches; or contains wildcard expressions and there are only partial matches. By default, it returns an empty jobs array when there are no matches and the subset of results when there are partial matches. Iffalse
, the request returns a 404 status code when there are no matches or only partial matches. -
force boolean
Use to close a failed job, or to forcefully close a job which has not responded to its initial close request; the request returns without performing the associated actions such as flushing buffers and persisting the model snapshots. If you want the job to be in a consistent state after the close job API returns, do not set to
true
. This parameter should be used only in situations where the job has already failed or where you are not interested in results the job might have recently produced or might produce in the future. -
timeout string
Controls the time to wait until a job has closed.
Body
-
allow_no_match boolean
Refer to the description for the
allow_no_match
query parameter. -
force boolean
Refer to the descriptiion for the
force
query parameter. -
timeout string
A duration. Units can be
nanos
,micros
,ms
(milliseconds),s
(seconds),m
(minutes),h
(hours) andd
(days). Also accepts "0" without a unit and "-1" to indicate an unspecified value.
curl \
-X POST http://api.example.com/_ml/anomaly_detectors/{job_id}/_close \
-H "Content-Type: application/json" \
-d '{"allow_no_match":true,"force":true,"timeout":"string"}'
{
"allow_no_match": true,
"force": true,
"timeout": "string"
}
{
"closed": true
}