# Reports

**Instructions for viewing Anomalies**

1. On the main Infrastructure Anomalies screen, the system will display a summary of the Infrastructure Anomalies that occurred in the last 7 days.

* **Number of Monitored Accounts:** Total number of accounts being monitored to identify anomalies
* **Number of Enabled Models**: Number of enabled templates per account that can be infringed
* **Anomalies from last report**: Number of anomalies detected.
* **Total Deviations**: Total calculated value.

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FEbPCwcW9cSM43vB0ohQn%2Fimage.png?alt=media&#x26;token=a664226b-cf4c-4541-a953-4ec151658b0e" alt=""><figcaption></figcaption></figure>

The system allows to change the number of days to be viewed in the report by clicking on the option:

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FCOu8VBP0FE6tcSnmvnf2%2Fimage.png?alt=media&#x26;token=6989a6cd-36a9-4bdf-bac3-b8c8b5677c73" alt=""><figcaption></figcaption></figure>

2. In the Anomaly Listing corresponding to the desired date, click on **View Report "**![](https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FMLr2mcR8P3TWguX9dVO3%2Fimage.png?alt=media\&token=d1146060-afff-4cf9-b74d-0e5b8e38fbb0)**"**.

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FVKnFBuVIVyFdUCN83Bz0%2Fimage.png?alt=media&#x26;token=32c57703-4cb8-42b5-8cb2-64b448235d72" alt=""><figcaption></figcaption></figure>

A **List of Anomalies** for the day will be displayed, indicating the main information about the services consumed that violated the configured model.

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FpWhZvYrk2QBdiSsh4LXk%2Fimage.png?alt=media&#x26;token=a7d30ad3-8587-4805-8e07-d82e94d53735" alt=""><figcaption></figcaption></figure>

3. The system allows you to filter the list by showing the anomalies that were verified or not, by clicking on the option:

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FhuHnx03spdQT6muKghEv%2Fimage.png?alt=media&#x26;token=f718f333-4c4a-4506-8a1c-1f974d1f1bec" alt=""><figcaption></figcaption></figure>

4. To access the **Anomaly Details**, click on **View Report** **"**![](https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FAbbWD6oPILh0lfcjI6Zj%2Fimage.png?alt=media\&token=62e52588-b0f6-4346-893d-7b590f2afdcf)**"**:

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FnAsB18hEpgjzAaC3dzXY%2Fimage.png?alt=media&#x26;token=b8d33609-d38b-4576-accc-2d7142eec4b5" alt=""><figcaption></figcaption></figure>

In the **Anomaly Detail**, it is possible to identify the infringed model, the Expected cost, the Increase in dollars and in percentage.

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FFA4f2waEF1znNusQMTmI%2Fimage.png?alt=media&#x26;token=2e51b550-8f5c-42a5-9951-f04356228c57" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
Whenever the expected cost is **zero**, even if the increase in $ is greater than zero, the percentage increase cannot be calculated, returning the following message: "**Increase not applicable"**.
{% endhint %}

5. To open the View click on "![](https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FbIEJMA4JWi3twr4IX5He%2Fimage.png?alt=media\&token=a71c5245-cd36-4f08-9e10-b258eb6c1c37)"

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2F4jtFkv8LxLa7wEaELTQa%2Fimage.png?alt=media&#x26;token=7e03bf06-df5d-4c37-b98d-5357b6cc003a" alt=""><figcaption></figcaption></figure>

The system allows to open the view and make adjustments if necessary:

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FSISZeNIFUYkzAmnTL55b%2Fimage.png?alt=media&#x26;token=363648d5-ac54-44a0-a15a-a444b142d15c" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
For each anomaly view generated, some default filter options will be applied, which can be customized as needed:

* lineitem/lineitemtype
* lineitem/usageaccountid
* product/region
* product/productname
* lineitem/usagetype
  {% endhint %}

6. Set the Anomaly as "**Verified**":

* In the **Anomaly Listing**, click the **Verified** button:

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FzKIaNQ8hgE1pfcfkykZF%2Fimage.png?alt=media&#x26;token=44803c20-e315-4e50-866c-9d232be7eef8" alt=""><figcaption></figcaption></figure>

* On the screen displayed, enter the **Classification**:
  * **Anomaly**: Behavior outside the expected pattern.
  * **False Positive**: Alert generated by something legitimate identified as a threat.
  * **Expected Behavior**: When it is a behavior that is different from normal, but expected by the system due to a specific moment/event.

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FCx67zFGQ9Q84Z5ZNhmsL%2Fimage.png?alt=media&#x26;token=394f52c2-7b67-4516-8ac6-e653d6a761b4" alt=""><figcaption></figcaption></figure>

* Inform the **description** and then click the **Save** button.

{% hint style="info" %}
To send an alert about Anomalies, access: Alarms
{% endhint %}

#### Sync with Forecast

When selecting Sync with Forecast on an infrastructure anomaly, the system automatically creates an event in the Infrastructure Forecast module using the anomaly’s data.

While this event is active, the identified deviation will be excluded from the forecast calculation, preventing one-time spikes or drops from impacting future projections.

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FtQKzRp0200VcZancgHqp%2Fimage.png?alt=media&#x26;token=263a0add-5100-45f2-a56c-4a247e1179e5" alt=""><figcaption></figcaption></figure>

&#x20;
