This results in a foundational dictionary of unique event types which is used to learn normal patterns and reliably detect log anomalies when events "break pattern". Everything is self-managed across software versions. 

Log anomaly detection that actually works

Only by having a structured representation of events and a dictionary of unique events types can we use ML to  learn normal patterns and uncover log anomalies. Examples of factors that contribute to anomaly scoring include: new or rare event, event severity, change in frequency, change in periodicity, correlation between anomalies across one or more files or streams, etc.

In order to achieve very high signal-to-noise, incidents are only created when the ML detects sets of tightly correlated anomalies.

A new way to interact with your data

We've achieved the impossible - a familiar and intuitive event viewer, with super-powers that let you easily interact with your data (all made possible because we've perfectly structured the underlying data sets). Here are just some of the things you can easily do:
- Select any metric or string and instantly see it charted (and of course no human had to build a parsing expression to do this)
- Get rid of spammy events with just a click
- Filter so you see only specific event types
- See data from multiple sources interleaved in time series order (and then click back to just one source)
- Navigate directly to any known issue, anomaly or exception (or any user defined "track")
- Create navigable visualizations from event types, strings, metrics (with or without constraints)
- And a whole lot more...

Ze CLI

For the power user we offer a CLI that gives you fine-grained access to the underlying structured log, metric and anomaly data. This includes the ability to perform SQL queries of arbitrary complexity and query our dictionary of events.

Getting started is free and easy

We have built a SaaS platform that’s intuitive and easy to use. Integration with your application is as simple as two kubectl commands for Kubernetes, or a simple agent for other environments. No software changes or additional instrumentation required.