Start your investigation with anomalies using Unomaly 3.0
Unomaly 3.0 offers more ways to investigate the anomalies plaguing your environment by introducing the Anomaly Page. This page gives you a complete list of anomalies that have occurred across your entire environment, unlike the situations view, which are time-based clusters of anomalies based on each of your individual log sources.
Regardless of your investigation strategy, Unomaly can help you uncover the cause of your issues by diving into our algorithmic clustering of anomalies or allow you to understand the cause and effect of changes throughout your environment by reviewing a raw list of anomalies across all of your log sources.
Investigating with Anomalies
Whether your primary use case for Unomaly is identifying causes for an ongoing issue, staying on top of changes in your environment or daily log review for suspicious activity. Starting your investigations with a raw list of anomalies throughout your entire IT environment is a powerful way to enable you and your teams to manage change, take action if needed, resulting in a healthy current state.
3.0 ensures working with anomalies directly is much easier and much more powerful than in previous versions of our product. In addition to the new Anomaly Page, we’ve enhanced the core data accessible to you during your investigation and made this data easier to work with.
- More metadata. Anomalies appearing both in situations and on the anomaly pagehave added context to support your investigation.
- Anomaly filters. Making it easier to work with an sort anomalies by what is new in infrastructure, new in system, system away or parameter changes.
3.0 Enhances Your Investigative Tooling
In 3.0 we wanted to do more than offer more ways to investigate, but also make investigations more intuitive so you can spend more time applying your knowledge to incidents and uncovering the causes behind your anomalies and less time using Unomaly.
- Graph updates. We’ve added tools to make it easier to zoom -in and -out of the graph to pinpoint exact moments in your environment’s timeline or to get a broad view of your environment’s history. There are also new annotations to show event frequency when you hover over the graph and new preset time-picker options.
- Navigation updates. We want to you to find the content you are looking for faster and discover new ways to use Unomaly that you may have previously missed or introduced in this release. This includes a new layout for our main navigation as well as action menu for each anomaly with callouts to copy log messages, add knowns and view system profiles.
- View creation. It’s now easier to create views from filtered searches, which can be shared with your team.
- JOINs on filter categories. Every filter type (anomaly type, system, group, known and tag) supports filtering on multiple values of each condition.
For a complete list of updates please review our release documentation & change log.
Looking Towards the future
We are constantly iterating on Unomaly and on our release process and want our customers and our friends who follow us to have full transparency in how we work. We have committed internally to releasing updates every six weeks to continuing improve our anomaly detection and offer you better ways to investigate.
In 3.1 we will officially be releasing Frequency Anomalies, which have been an experimental feature since Unomaly 2.24. This feature will detect when the rate of an event spikes or slows beyond what is expected for your environments current state and will notify you when an event stops all together. We’ve been testing this feature for a number of months and now have the confidence that this will provide a useful layer of anomaly detection for all of our customers.
Community Slack Channel
Have questions about our release or just curious about how others are using Unomaly to analyze and investigate their logs? Join us on our community Slack channel and just ask. Of course if you are already a customer you can always contact our support team.