Anomaly Detection

Hi DennesTorres 

Welcome to Fabric Community and thanks for posting your question here.

As I understand that you are trying to use series_decompose_anomalies to detect individual anomaly values, instead of aggregated anomaly values. And you want to use the make-series without aggregation.

No, it is not possible to use the make-series operator without an aggregation function in MS Fabric KQL Query. The make-series operator is designed to create a series of aggregated values, and it requires an aggregation function to specify how the values should be aggregated.

For more information, please refer : make-series operator - Azure Data Explorer | Microsoft Learn

Yes, it is possible to use series_decompose_anomalies to detect individual anomaly values, instead of aggregated anomaly values in MS Fabric KQL. The function takes an expression containing a series (dynamic numerical array) as input, and extracts anomalous points with scores.

For more information, please refer : series_decompose_anomalies() - Azure Data Explorer | Microsoft Learn

I hope this information is helpful. Please let me know if you have any other questions.