Rules

Anomaly Formula: Amount-By-Max

What it does:
This rule compares your latest usage with the highest value from your previous usage history (excluding the latest value). If the change exceeds your defined threshold—and matches the direction you’re watching (increase, decrease, or any)—it’s flagged as an anomaly.

When to use it:
Use this formula when you want to know if your current usage surpasses or drops sharply below your previous maximum. Ideal for monitoring cost spikes beyond known limits.

Examples

❌ Example 1: Slight Increase But Below Threshold (No Alert)

• Anomaly Formula: AmountByMax
• Change Type: Increased
• Threshold: 180
• History: [100, 101, 99, 150, 102, 98, 97, 160, 100, 101, 98, 96, 165, 100, 99, 102, 98, 97, 170, 99, 100, 98, 96, 175, 101, 100, 102, 98, 180]
• Explanation:
  • Previous max = 175, latest = 180
  • Difference = 180 – 175 = 5
  • 5 < 180, so no alert is triggered

✅ Example 2: Major Drop From Max Triggers Alert

• Anomaly Formula: AmountByMax
• Change Type: Decreased
• Threshold: 100
• History: [300, 320, 310, 280, 150]
• Explanation:
  • Previous max = 320, latest = 150
  • Difference = 150 – 320 = -170
  • Since -170 ≤ -100, an alert is triggered

✅ Example 3: Jump Above Max Triggers Alert (Change Type = Any)

• Anomaly Formula: AmountByMax
• Change Type: Any
• Threshold: 40
• History: [100, 105, 110, 120, 170]
• Explanation:
  • Previous max = 120, latest = 170
  • Difference = 170 – 120 = 50
  • |50| ≥ 40, so an alert is triggered