Understand unexpected Elasticsearch anomaly scores.
Explains unexpected Elasticsearch anomaly scores using anomaly records, job configuration, and model behavior.
When to use it
Use when users ask about high or low anomaly scores, model learning, score meanings, or unexpected results.
Give it an anomaly-score question; it explains supplied records directly or retrieves missing information from the cluster.
Cluster operations require the elastic CLI; if it is absent, the agent must explain the need rather than use direct HTTP calls or workarounds.
Requires Elasticsearch 8.x+ or Elastic Cloud Serverless with ML anomaly detection and monitor_ml privileges for cluster queries; self-managed clusters require a Platinum-equivalent license.
This skill
Elasticsearch
Reads Elasticsearch anomaly data