The Anomaly Explorer view does not currently display category examples for an anomaly detection job if a population analysis has been performed, for example a configuration such as count by mlcategory over process_name (with an over_field_name).
The decision not to display examples as we do for analyses without an over field was originally made because there could be up to 10 different categories and up to 4 examples for each. However with the addition of a 'Category examples' tab in the expanded row in https://github.com/elastic/kibana/pull/28376, it should now be possible to display examples for categorization anomalies for a population analysis.
The Anomaly Explorer view does not currently display category examples for an anomaly detection job if a population analysis has been performed, for example a configuration such as
count by mlcategory over process_name
(with anover_field_name
).The decision not to display examples as we do for analyses without an
over
field was originally made because there could be up to 10 different categories and up to 4 examples for each. However with the addition of a 'Category examples' tab in the expanded row in https://github.com/elastic/kibana/pull/28376, it should now be possible to display examples for categorization anomalies for a population analysis.