- Machine Learning: other versions:
- Setup and security
- Getting started with machine learning
- Anomaly detection
- Overview
- Concepts
- Configure anomaly detection
- API quick reference
- Supplied configurations
- Function reference
- Examples
- Generating alerts for anomaly detection jobs
- Aggregating data for faster performance
- Customizing detectors with custom rules
- Detecting anomalous categories of data
- Detecting anomalous locations in geographic data
- Performing population analysis
- Altering data in your datafeed with runtime fields
- Adding custom URLs to machine learning results
- Handling delayed data
- Mapping anomalies by location
- Exporting and importing machine learning jobs
- Limitations
- Troubleshooting
- Data frame analytics
Restart failed anomaly detection jobs
editRestart failed anomaly detection jobs
editIf an anomaly detection job fails, try to restart the job by following the procedure described below. If the restarted job runs as expected, then the problem that caused the job to fail was transient and no further investigation is needed. If the job quickly fails after the restart, then the problem is persistent and needs further investigation. In this case, find out which node the failed job was running on by checking the job stats on the Job management pane in Kibana. Then get the logs for that node and look for exceptions and errors where the ID of the anomaly detection job is in the message to have a better understanding of the issue.
If an anomaly detection job has failed, do the following to recover from failed
state:
-
Force stop the corresponding datafeed by using the Stop datafeed API with the
force
parameter beingtrue
. For example, the following request force stops themy_datafeed
datafeed.POST _ml/datafeeds/my_datafeed/_stop { "force": "true" }
-
Force close the anomaly detection job by using the Close anomaly detection job API with the
force
parameter beingtrue
. For example, the following request force closes themy_job
anomaly detection job:POST _ml/anomaly_detectors/my_job/_close?force=true
- Restart the anomaly detection job on the Job management pane in Kibana.