Normally anomaly detection takes time to set up. You need to train your model against a large amount of data to determine what’s normal operation and what’s out of the ordinary.