Understand how window size, sensitivity, and segments affect the number of incidents detected by Validio Dynamic Thresholds.
This article discusses the number of incidents you can expect to observe when using Dynamic Thresholds for your validator.The number of incidents created by the Dynamic Thresholds depends on the window size, sensitivity, and number of segments. As the window size decreases and sensitivity increases, the algorithm identifies more anomalies. This behavior reflects the trade-off between the granularity and the sensitivity of the detection process: Larger windows and lower sensitivity yield fewer incidents, while smaller windows and higher sensitivity result in a greater number of detected anomalies.Metrics that move in steps, known as piecewise constant metrics, raise fewer incidents than their jumps might suggest, because dynamic thresholds learn which steps are routine and only flag unusually large ones. For more information, see Step-like (piecewise constant) metrics.The following tables show the number of detected incidents you can expect the Dynamic Threshold to generate for the next 7-day period. You can use these numbers to estimate how many incidents you will receive from your validators depending on different windows, sensitivities, and number of segments.Expected number of incidents (next 7 days), sensitivity = 2
Tumbling window type
100 segments
200 segments
500 segments
1500 segments
daily
0
1
2
6
hourly
9
18
44
133
10 minute
53
106
265
800
5 minute
106
212
531
1600
Expected number of incidents (next 7 days), sensitivity = 4