Total Events
50
Last 24 hours
Anomalies Detected
8
Score ≥ 70
False Positive Rate
4.2%
Estimated (analyst feedback)
Model Status
ACTIVE
Isolation Forest v2.1
📈 24-Hour Anomaly Score Timeline
Click near a spike to inspect
Anomaly Score High Anomaly (≥70) Threshold (70)
📋 Live Event Feed
50 events
🔍 Anomaly Detail
Click an event to inspect
🎯
Select an anomalous event from the feed to view contributing factors.
🧠 Model Information
Algorithm
Isolation Forest
Contamination
10%
Training Samples
2,400
n_estimators
200
Alert Threshold
70 / 100
Last Trained
2024-01-15
📊 Feature Importance
📤 Upload Log File
📁
Drop CSV file here or browse
Expects: timestamp, src_ip, dst_ip, port, bytes, protocol, duration, user
🔗 Alert Correlation
Grouped by source IP & time window (5 min)