This card describes the issue that led to the alert. The identified issue appears on the card and in the title for the alert. Information about the alert appears in the banner.

Select the Details tab for more information about the alert.

Select the View surrounding logs link to view the log lines that were generated one minute before and one minute after the alert. For more information, see Analyze log lines that surround an anomaly in Health Log Analytics.

The Anomaly card illustrates the anomalous activity that led to the alert. The chart shows:

In this example, the system tracks the baseline rate (the average number of events per minute) for a specific log pattern. When this typically inactive log generates a spike in events, the system detects the deviation from the baseline and generates an alert.

In this example, the blue line represents the current average number of events per minute. The orange-shaded area represents the baseline values for the same hour in the previous week.

For more information on the kinds of anomalies that you might encounter, see Types of anomalous behavior in Health Log Analytics.