Managing anomaly detection

Last published : Apr 02, 2026
You can view the list of reported anomalies to confirm a record as an anomaly or to confirm that it is not an anomaly. By default, the list of anomalies is displayed for the last 7 days. To view anomalies for more than 7 days, you can apply filters.
Each page in the Anomaly Detection window displays 100 records. Any selection or action that you perform on the anomalies is limited to that specific page.
To manage anomaly detection
  1. Do any of the following:
    • In the System Heathgroup, underAnomaly Detection, clickManage Anomalies.
    • On the Job Monitor tab, click Anomaly Detection > Anomaly Information.
On the Anomaly Detection window, the list of anomalies is displayed.
  1. For an anomaly, you can do the following:
    Job Name Displays name of the backup job.
    Resource Name Displays name of the resource that is backed up.
    The resources can be backup sets or jobs (Microsoft 365).
    Detection Time Date and time when the anomaly is detected.
    Severity Displays the severity of the anomaly.
    The anomaly score is calculated based on the backup job parameters, attributes, or features. Based on score the severity of the anomaly is categorized.
    - Score: 0-10 - Low
    - Score: 10-15 - Medium
    - Score: >15 - High
    Anomaly Status Displays the status of the anomaly.
    - False Positive
    - Anomaly Confirmed
    Reason Reason given for the False Positive anomaly status.
    Image Size Displays size of the backup image and usual size range of the image.
    Backup Item Count Displays number of items that are backed up and usual range of the number of items that are backed up.
    Deduplication Ratio Displays ratio of the amount of data before
    deduplication to the amount of data after
    deduplication.
    Usual range of the deduplication ratio is also displayed.
    Backup Time Displays backup time in seconds and usual range of the backup time.
    Data Transferred Displays total size of data transferred over the network and usual size range of the data transferred.
    For deduplication storage devices the size can be less than the actual image size. For other storage devices the size is same as the backup image size.
    Score Displays the anomaly score.
    Report as False Positive This can be done in two ways\:
    - Select the checkbox corresponding to the record and click Report as False Positive to confirm that the record is not an anomaly.
    - Select multiple records and click Report as False Positive to confirm that the records are not anomalies.
    During multiple selections, the option is in a disabled state if at least one record is confirmed as an anomaly. Remove the record from the selection and confirm that the selected records are not anomalies.
    You must also enter a reason why any of the selected records are not anomalies.
    Confirm as anomaly This can be done in two ways\:
    - Select the checkbox corresponding to the record and click Confirm as anomaly to confirm that the record is an anomaly.
    - Select multiple records and click Confirm as anomaly to confirm that the records are anomalies.
    During multiple selections, the option is in a disabled state if at least one record is confirmed as not an anomaly. Remove the record from the selection and confirm that the selected records are anomalies.
    View Job Log Click to view the job log and job history.
    Refresh Click to update the anomaly list. Any actions that you performed are removed.
    Collapse All Click to collapse all expanded records.
  2. Click Apply Filter to filter and view the anomalies.
By default, anomalies for the last 7 days are displayed.
  1. On the Manage Anomaly Detectionwindow, select the filters and clickOK.
    Job Name Select Enable this filter to filter records based on the job name.
    Resource Name Select Enable this filter to filter records based on the resource name.
    Detection Time Select Enable this filter to filter records based on the time period.
    You can filter the records for a selected number of days or select a date range. Ensure that the date range does not exceed 30 days.
    Severity Select Enable this filter to filter records based on the severity of the anomaly.
  2. Click OK.
Related information