Anomaly charts are displayed in the Anomaly Explorer and Single Metric Viewer for most of the available ML detector functions - https://www.elastic.co/guide/en/elastic-stack-overview/current/ml-functions.html, including count, mean, min, max and sum. However for a number of functions, no charts are displayed and the anomalies are only listed in the table.

This is a meta issue to cover the addition of charts for detector functions which are currently not plotted. Providing a chart visual along with the existing tabular information for these functions will help the user understand the anomalies that ML has found in their data.

Anomaly Explorer

• varp
  • model plot enabled (7.2 [ML] Extends support for anomaly charts when model plot is enabled #34079)
  • model plot not enabled
• lat_long (7.12 [ML] Anomaly Detection: add anomalies map to explorer for jobs with 'lat_long' function #88416)
• info_content
  • model plot enabled (7.2 [ML] Extends support for anomaly charts when model plot is enabled #34079)
  • model plot not enabled
• rare [ML] Anomaly Explorer Rare/Population Charts #23423
• rare with over field
• freq_rare
• time_of_day
• time_of_week
• categorization detectors using mlcategory
  • count by mlcategory model plot enabled
  • count by mlcategory model plot not enabled
  • rare by mlcategory model plot enabled (no plot generated for rare)
  • rare by mlcategory model plot not enabled
• custom population/distribution chart for detectors with an over field [ML] Anomaly Explorer Rare/Population Charts #23423 [ML] Enables display of contextual data for population charts using other metrics than count. #24083
• detector where the metric field_name is a scripted field defined in the datafeed_config.script_fields
  • model plot enabled (7.2 [ML] Extends support for anomaly charts when model plot is enabled #34079)
  • model plot not enabled (7.11 [ML] Improve support for script and aggregation fields in anomaly detection jobs #81923)
• detector where a partitioning field is a scripted field defined in the datafeed_config.script_fields
  • model plot enabled (7.2 [ML] Extends support for anomaly charts when model plot is enabled #34079)
  • model plot not enabled
• detector where the metric field_name is defined in datafeed aggregations
  • model plot enabled (7.11 [ML] Improve support for script and aggregation fields in anomaly detection jobs #81923)
  • model plot not enabled (7.11 [ML] Improve support for script and aggregation fields in anomaly detection jobs #81923)
• detector which uses nested terms aggregations in the datafeed
  • model plot enabled (7.11 [ML] Improve support for script and aggregation fields in anomaly detection jobs #81923)
  • model plot not enabled
• detector which uses runtime_mappings in the datafeed
  • model plot enabled (7.11 [ML] Fix error callout for Anomaly detection jobs using runtime_mappings #86407)
  • model plot not enabled (7.13 [ML] Add runtime support for anomaly charts & add composite validations #96348)

Single Metric Viewer

• varp
  • model plot enabled (7.2 [ML] Extends support for anomaly charts when model plot is enabled #34079)
  • model plot not enabled
• lat_long (single metric chart not applicable)
• info_content
  • model plot enabled (7.2 [ML] Extends support for anomaly charts when model plot is enabled #34079)
  • model plot not enabled
• rare
• freq_rare
• time_of_day
• time_of_week
• categorization detectors using mlcategory
  • count by mlcategory model plot enabled
  • rare by mlcategory model plot enabled (no plot generated for rare)
  • count by mlcategory model plot not enabled
  • rare by mlcategory model plot not enabled
• detector where a partitioning field is a scripted field defined in the datafeed_config.script_fields
  • model plot enabled (7.2 [ML] Extends support for anomaly charts when model plot is enabled #34079)
  • model plot not enabled (7.11 [ML] Improve support for script and aggregation fields in anomaly detection jobs #81923)
• detector where the metric field_name is a scripted field defined in the datafeed_config.script_fields
  • model plot enabled (7.2 [ML] Extends support for anomaly charts when model plot is enabled #34079)
  • model plot not enabled
• detector where the metric field_name is defined in datafeed aggregations
  • model plot enabled (7.11 [ML] Improve support for script and aggregation fields in anomaly detection jobs #81923)
  • model plot not enabled (7.11 [ML] Improve support for script and aggregation fields in anomaly detection jobs #81923)
• detector which uses nested terms aggregations in the datafeed
  • model plot enabled (7.11 [ML] Improve support for script and aggregation fields in anomaly detection jobs #81923)
  • model plot not enabled
• detector which uses runtime_mappings in the datafeed
  • model plot enabled (7.11 [ML] Fix error callout for Anomaly detection jobs using runtime_mappings #86407)
  • model plot not enabled (7.13 [ML] Add runtime support for anomaly charts & add composite validations #96348)