
10/31/2023 · Cathy Chi, Natasha Wissmann
What this post added
Introduced Traffic Anomalies notifications for enterprise customers, which trigger based on unexpected changes in HTTP traffic. This feature utilizes z-scores to compare traffic over the past 5 minutes against the average over the past 4 hours, alerting when the deviation exceeds 3.5 standard deviations. Minimum thresholds of 200 requests for spikes and drops are applied to reduce noise. The system stores sampled HTTP traffic statistics in Clickhouse, then moves them to VictoriaMetrics for time-series analysis, leveraging its algorithmic functions and scalability. The existing Alert Notification System is used for delivery.