Identify atypical data and receive automatic notifications https://opensearch.org/docs/latest/monitoring-plugins/ad/index/
  • Java 93.9%
  • Python 5.6%
  • Groovy 0.3%
Find a file
2026-09-10 11:29:22 -04:00
.github Bump 1password/load-secrets-action to v5.0.1 (anomaly-detection) (#1764) 2026-08-20 15:23:06 -04:00
build-tools Add integTest coverage reporting and README badge (#1679) 2026-03-04 12:50:48 -08:00
dataGeneration Fix CVE-2026-25645: Bump requests from >=2.32.4 to >=2.33.0 (#1713) 2026-05-27 17:36:59 -07:00
docs Make frequency optional; fix STOPPED state; add ecommerce tests (#1565) 2025-10-01 11:39:54 -07:00
gradle/wrapper [AUTO] Increment version to 3.7.0-SNAPSHOT (#1690) 2026-05-11 15:41:15 -07:00
release-notes [AUTO] Add release notes for 3.8.0 (#1755) 2026-07-29 12:05:44 -07:00
scripts feat(terraform): add AD detector provisioning and lifecycle automation (#1680) 2026-03-10 12:17:32 -07:00
src Add PPL source support for detectors (#1718) 2026-06-11 13:56:52 -07:00
.eclipseformat.xml Removing few lingering Elasticsearch strings in the repo (#6) 2021-04-14 14:28:00 -07:00
.gitignore feat(terraform): add AD detector provisioning and lifecycle automation (#1680) 2026-03-10 12:17:32 -07:00
.whitesource Add .whitesource configuration file (#349) 2022-01-07 10:17:49 -08:00
build.gradle Guard eclipse() to spotless tasks and keep P2 mirror on pinned version (anomaly-detection) (#1772) 2026-09-10 11:29:22 -04:00
CHANGELOG.md Add PPL source support for detectors (#1718) 2026-06-11 13:56:52 -07:00
CODE_OF_CONDUCT.md Updating the license and docs (#7) 2021-04-16 16:47:51 -07:00
codecov.yml Add integTest coverage reporting and README badge (#1679) 2026-03-04 12:50:48 -08:00
CONTRIBUTING.md Update and add documentation files (#105) 2021-06-24 12:21:52 -07:00
DEVELOPER_GUIDE.md Updates search handler to consume resource authz and updates resource authz related tests (#1546) 2025-09-30 18:12:59 -07:00
gradle.properties Update Gradle Wrapper to 8.2.1 for Enhanced JDK20 Compatibility (#985) 2023-08-21 11:21:36 -07:00
gradlew [AUTO] Increment version to 3.7.0-SNAPSHOT (#1690) 2026-05-11 15:41:15 -07:00
gradlew.bat dependabot: bump gradle-wrapper from 9.2.0 to 9.3.0 (#1653) 2026-02-01 06:47:54 -08:00
LICENSE.txt Intial Anomaly detection release 2019-11-22 14:42:03 -08:00
MAINTAINERS.md Updated Maintainers and CODE_OWNERS list (#926) 2023-06-12 11:54:39 -07:00
NOTICE.txt correct copyright notice; remove old copyright from ODFE (#257) 2021-10-06 10:39:58 -07:00
README.md feat(terraform): add AD detector provisioning and lifecycle automation (#1680) 2026-03-10 12:17:32 -07:00
RELEASING.md Update and add documentation files (#105) 2021-06-24 12:21:52 -07:00
SECURITY.md Update and add documentation files (#105) 2021-06-24 12:21:52 -07:00
settings.gradle Add ci.opensearch.org/m2/ mirror for plugin resolution (anomaly-detection) (#1757) (#1759) 2026-07-31 17:41:14 -04:00
THIRD-PARTY update third-party 2019-12-27 16:17:05 -08:00

AD Test Plugin Coverage IntegTest Coverage Documentation Forum PRs welcome!

OpenSearch Anomaly Detection

The OpenSearch Anomaly Detection plugin enables you to leverage Machine Learning based algorithms to automatically detect anomalies as your log data is ingested. Combined with OpenSearch Alerting, you can monitor your data in near real time and automatically send alert notifications . With an intuitive OpenSearch Dashboards interface, and a powerful API, it is easy to set up, tune, and monitor your anomaly detectors.

Anomaly detection is using the Random Cut Forest (RCF) algorithm for detecting anomalous data points.

Anomaly detections run a scheduled job using job-scheduler.

You can use this plugin with the same version of the OpenSearch Alerting Plugin to create monitors based on created anomaly detectors. A scheduled monitor run checks the anomaly detection results regularly, and collects anomalies to trigger alerts based on custom trigger conditions.

Documentation

Please see our documentation.

Contributing

See developer guide and how to contribute to this project.

Code of Conduct

This project has adopted the Amazon Open Source Code of Conduct. For more information see the Code of Conduct FAQ, or contact opensource-codeofconduct@amazon.com with any additional questions or comments.

Security

If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our vulnerability reporting page. Please do not create a public GitHub issue.

License

This project is licensed under the Apache v2.0 License.

Copyright OpenSearch Contributors. See NOTICE for details.