Rules

Anomaly Detection

Trouble usually starts with a single measurement going wrong: response time climbs noticeably, a certificate changes when it shouldn't, a record is updated without your knowledge. Specula runs the check rules defined for each asset, and when a measurement crosses the limit you set, it shows you that alongside whatever else changed at the same time — not as an isolated line.

• You set the thresholds

  You define the limits for response time, certificate lifetime, the expected port list, and the rest. The rule is explicit and predictable, so you always know why an alert fired.

• Changes are read together

  A certificate change and a DNS update in the same hour are shown as one event, not two unrelated lines.

• Muting is in your hands

  For a change you made on purpose, mute the rule temporarily or update the threshold. Only the alerts you consider important stay in the console.