> For the complete documentation index, see [llms.txt](https://docs.infraon.io/infraon-help/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.infraon.io/infraon-help/infinity-user-guide/asset/aiops-configuration/adaptive-threshold.md).

# Adaptive Threshold

It helps detect anomalies in performance metrics by automatically learning patterns and setting dynamic thresholds, instead of relying on fixed, static values. It is part of the Prediction engine and is particularly useful for identifying unusual behavior in real-time monitoring data.

Adaptive Thresholds are **model-generated** limits that define what is considered "normal" for each metric over time. Instead of using a fixed value (like 80% for all metrics), the system learns from historical data and sets a **custom threshold for each hour** of each day.

This ensures better accuracy in detecting genuine anomalies while reducing noise, especially in environments with varying traffic patterns, workloads, or seasonal behavior.

## **How Adaptive Threshold is Created**

**Data Collection**

The system regularly collects performance metrics (polled data) (e.g., every 5 minutes).

**Model Training**

The short-term prediction model is trained using the **last 30 days of historical data**, which is aggregated at an hourly level. This model generates adaptive thresholds for identifying anomalies in real time.

**Window Forecasting**

The model predicts usage for the **next 2 weeks**, broken down **hour by hour**.

**Threshold Generation**

For each hour, the system generates the following dynamic thresholds:

* **Polled Data** – Actual collected data from the resource.
* **Lower Band** – Minimum expected value.
* **Upper Band** – Maximum expected value.
* **Critical Upper Band** – A stricter upper threshold for flagging critical anomalies.

These thresholds help the system determine normal vs. abnormal behavior for each time window.

## **How It Works**

Adaptive Thresholds use short-term **time-series prediction models** that learn usage patterns over time. Key concepts include:

* **Trend detection –** Identifies regular increase/decrease patterns.
* **Hourly profiling –** Learns a "normal" value for each specific hour.
* **Upper and lower bounds –** Represent a statistical confidence range.
* **Model refresh –** Rebuilt every 7 days using the latest data.

The system avoids overfitting or underfitting by using a balanced model sensitivity.

## **What do you see on the screen**

The **Adaptive Threshold** screen displays a performance graph that visually compares actual system behavior against dynamically learned threshold ranges. The graph provides a real-time, hour-by-hour overview of how a metric (e.g., CPU, memory, interface utilization) performs relative to predicted safe zones.

**Adaptive Threshold |** Basic Details

<table data-header-hidden><thead><tr><th valign="top"></th><th valign="top"></th><th valign="top"></th></tr></thead><tbody><tr><td valign="top"><strong>Label</strong></td><td valign="top"><strong>Action</strong></td><td valign="top"><strong>Description / Example</strong></td></tr><tr><td valign="top"><strong>Polled Data</strong></td><td valign="top">Displays actual usage</td><td valign="top">Blue line showing real-time performance values collected at intervals.</td></tr><tr><td valign="top"><strong>Lower Band</strong></td><td valign="top">Shows the minimum predicted value</td><td valign="top">Bottom boundary of the threshold range. Values below this are considered anomalies.</td></tr><tr><td valign="top"><strong>Upper Band</strong></td><td valign="top">Shows the maximum predicted value</td><td valign="top">Top boundary of the expected range. Values above this may indicate a warning or anomaly.</td></tr><tr><td valign="top"><strong>Critical Upper Band</strong></td><td valign="top">Flags high-risk upper threshold</td><td valign="top">Stricter limit above the Upper Band used to detect critical-level anomalies.</td></tr><tr><td valign="top"><strong>Red Markers</strong></td><td valign="top">Highlights anomalies</td><td valign="top">Appears when actual data goes outside the threshold bands.</td></tr><tr><td valign="top"><strong>Filters</strong></td><td valign="top"></td><td valign="top"></td></tr><tr><td valign="top"><strong>Current Month</strong>         </td><td valign="top">Time filter   </td><td valign="top">Displays data from today to the end of the current month.</td></tr><tr><td valign="top"><strong>Next Month</strong></td><td valign="top">Time filter</td><td valign="top">Displays projected threshold behavior for the following month.</td></tr><tr><td valign="top"><strong>Next 3 Months</strong></td><td valign="top">Time filter</td><td valign="top">Shows threshold forecasts and anomalies across the next 90 days.</td></tr><tr><td valign="top"><strong>Next 6 Month</strong></td><td valign="top">Time filter</td><td valign="top"><p>Displays long-term prediction and anomaly trend for up to 180 days.</p><p> </p></td></tr></tbody></table>

**Adaptive Threshold |** Basic Details

This provides a detailed view of predicted thresholds and anomalies for each timestamp.

<table data-header-hidden><thead><tr><th valign="top"></th><th valign="top"></th></tr></thead><tbody><tr><td valign="top"><strong>Label</strong></td><td valign="top"><strong>Description / Example</strong></td></tr><tr><td valign="top"><strong>Time</strong></td><td valign="top">Timestamp for each data point (e.g., May 18, 2025 12:00 AM).</td></tr><tr><td valign="top"><strong>Upper Band</strong></td><td valign="top">The maximum expected value for the metric at that time (e.g., 8.37%).</td></tr><tr><td valign="top"><strong>Lower Band</strong></td><td valign="top">The minimum expected value for the time slot (e.g., 6.19%).</td></tr><tr><td valign="top"><strong>Critical Upper Band</strong></td><td valign="top">A stricter limit highlights critical anomalies (e.g., 9.47%).</td></tr><tr><td valign="top"><strong>Anomaly</strong></td><td valign="top">Indicates whether the actual value exceeded thresholds (e.g., 20%).</td></tr><tr><td valign="top"><strong>Toggle: Show Only Anomalies</strong></td><td valign="top">Filters the table to display only rows where anomalies are detected.</td></tr></tbody></table>

{% hint style="info" %}
**Export**

The adaptive threshold graph can be downloaded as a **PDF**, while the **adaptive threshold Data** table can be exported in **CSV format** for detailed offline review or further processing.
{% endhint %}

**Note**

<table data-header-hidden><thead><tr><th valign="top"></th><th valign="top"></th><th valign="top"></th></tr></thead><tbody><tr><td valign="top"><strong>Feature</strong></td><td valign="top"><strong>Forecast</strong></td><td valign="top"><strong>Prediction</strong></td></tr><tr><td valign="top"><strong>Focus</strong></td><td valign="top">Long-term trends (1–6 months)</td><td valign="top">Short-term anomalies (1–4 weeks)</td></tr><tr><td valign="top"><strong>Use Case</strong></td><td valign="top">Capacity planning</td><td valign="top">Anomaly detection</td></tr><tr><td valign="top"><strong>Output</strong></td><td valign="top">Graphs and capacity reports</td><td valign="top">Adaptive thresholds and alerts</td></tr></tbody></table>

&#x20;


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.infraon.io/infraon-help/infinity-user-guide/asset/aiops-configuration/adaptive-threshold.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
