> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aviatrix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Anomaly Detection

> This section provides the purpose, elements, and actions performed on the Anomaly Detection pages.

This section provides the purpose, elements, and actions performed on the
**Anomaly Detection** pages.

## Purpose

The **Anomaly Detection** page provides real-time visibility into unusual patterns, deviations, and potential security threats across cloud environments. It leverages advanced anomaly detection algorithms and integrates IDS/IPS capabilities for proactive monitoring and operational resilience.

## Elements

<img src={"/images/reference/ui/security/anomaly-detection.png"} alt="Security: Anomaly Detection" width="60%" />

* **Anomaly Summary Panel**: Displays detected anomalies with severity and impacted resources.
* **Topology View**: Visualizes anomaly location and affected gateways.
* **Flow Data Panel**: Shows traffic flows triggering anomaly alerts.
* **Policy Status**: Indicates if anomaly detection policies are active and compliant.
* **Performance Metrics**: Monitors detection accuracy and resource utilization.

## Actions

<AccordionGroup>
  <Accordion title="View Anomaly Detection">
    To view anomaly detection data and alerts:

    1. Go to **Security** > **Anomaly Detection**.
    2. The Anomaly Detection page appears with the **Anomaly Summary Panel** showing detected anomalies with severity and impacted resources.
    3. Review **Topology View** to visualize anomaly location and affected gateways.
    4. Use **Flow Data Panel** to inspect traffic flows triggering anomaly alerts.
    5. Check **Policy Status** for anomaly detection policy compliance and **Performance Metrics** for detection accuracy and resource utilization.

    The page provides real-time visibility into unusual patterns and potential security threats across cloud environments.

    ### Parameter Details

    | CoPilot Parameter Name | Description                                                   |
    | ---------------------- | ------------------------------------------------------------- |
    | Anomaly Summary        | Lists anomalies detected with severity levels.                |
    | Topology View          | Displays network topology highlighting impacted gateways.     |
    | Flow Data              | Shows source/destination IPs and ports for anomalous traffic. |
    | Policy Status          | Indicates if anomaly detection policies are enforced.         |
    | Detection Accuracy     | F1 score for anomaly detection algorithms.                    |
    | Response Time          | Average time to respond to detected anomalies.                |
    | Resource Utilization   | CPU and memory usage for anomaly detection services.          |
  </Accordion>
</AccordionGroup>
