FIG. 5 is a flow chart of an example process 500 for anomaly detection in a network. In some implementations, one or more process blocks of FIG. 5 may be performed by a network monitoring platform (e.g., network monitoring platform 240). In some implementations, one or more process blocks of FIG. 5 may be performed by another device or a group of devices separate from or including the network monitoring platform, such as an endpoint at site 1 (e.g., site 1 endpoint 210), an endpoint at site 2 (e.g., site 2 endpoint 220), a network node (e.g., network node 230), and a computing resource (e.g., computing resource 245), and/or the like.
As shown in FIG. 5, process 500 may include training a KPI prediction model, based on measurements of historical values of a KPI and associated parameters, using one or more machine learning processes (block 510). For example, the network monitoring platform (e.g., using computing resource 245, processor 320, memory 330, storage component 340, input component 350, output component 360, communication interface 370 and/or the like) may train a KPI prediction model, based on measurements of historical values of a KPI and associated parameters, using one or more machine learning processes, as described above.
