List anomalies
Precomputed anomalies: worsening regime shifts (BOCPD changepoints, threshold-free) detected continuously over persisted 5-minute series of every signal — error_rate and latency_p95 per operation, log_volume, error_log_rate and profile_cost (the service’s total profiled cost) per service (the operation field holds the entity) — and persisted to the sigiro_anomalies table. Ordered by the unit-free shift magnitude (after - before) / (after + before) descending (1.0 = appeared from a zero baseline, 1/3 = doubled), so the most significant shifts lead regardless of the signal’s units — nothing is filtered out; judge significance from before/after (raw signal units: %, µs, logs, profile cost). Optionally filter by service and a from_ts/to_ts window (microseconds since the Unix epoch) over the shift time. Each row carries a ready-to-run drill_down_sql for POST /v1/query. Rows whose shifts fall in the same or adjacent 5-minute detection bucket on the same service share an incident_id — one incident across signals, not N independent anomalies (the correlation window is the detection pass’s own bucket resolution, never a tuned threshold); incident_id is null for uncorrelated rows. truncated is true when the query row cap omitted shifts: this is an incomplete candidate snapshot and automatic submission must wait for a complete response.
/v1/anomaliesAuthorizationBearer token (prefixed-api-key) · headerrequiredservicestringfrom_tsinteger<int64>requiredto_tsinteger<int64>requiredanomaliesAnomalyEntry[]requiredShow propertiesHide properties
AnomalyEntryafternumber<double>requiredbeforenumber<double>requireddetected_atstringrequireddirectionstringrequireddrill_down_sqlstring | nullincident_idstring | nullkindstringrequiredoperationstringrequiredservice_namestringrequiredsignalstringrequiredts_shiftstringrequiredts_shift_usinteger<int64>requiredtruncatedbooleanrequired