Period: 2026-07-16 to 2026-07-23 (7 days) • Generated: 2026-07-23 12:44 UTC (2026-07-23 08:44 (America/New_York))
This week's 20 anomalies represent a concerning spike in AWS infrastructure issues, with Elasticsearch free storage space critically low in 8 instances and Lambda concurrent executions elevated in 6 cases, indicating potential capacity constraints that could impact application performance and availability. Of the 9 high-severity anomalies, most are stable or new issues requiring immediate investigation, particularly around the storage and compute resources which typically have cascading effects on dependent services. We recommend prioritizing remediation of the Elasticsearch storage depletion and Lambda throttling risks within the next 24-48 hours to prevent service degradation.
| Metric | Value |
|---|---|
| Total Anomalies Detected | 20 |
| High Severity (score ≥ 7) | 9 |
| Medium Severity (score ≥ 5) | 7 |
| Low Severity (score < 5) | 4 |
| Suppressed (maintenance) | 0 |
| Active Subscriptions | 22 |
| Silent Subscriptions (email disabled) | 2 |
| Maintenance Windows Configured | 1 |
| Trend | Subscriptions |
|---|---|
| Worsening | 1 |
| Stable | 7 |
| New | 1 |
| Metric | Count |
|---|---|
| AWS/ES/FreeStorageSpace | 8 |
| AWS/Lambda/ConcurrentExecutions | 6 |
| AWS/Firehose/DeliveryToS3.Records | 2 |
| AWS/ApplicationELB/TargetResponseTime | 2 |
| AIMonitor/Billing/DailySpend | 1 |
| AWS/Lambda/Throttles | 1 |
| Day | Count |
|---|---|
| Mon | 0 |
| Tue | 3 |
| Wed | 10 |
| Thu | 2 |
| Fri | 5 |
| Sat | 0 |
| Sun | 0 |
| Dimension | Count |
|---|---|
| ClientId=111111111111 | 8 |
| DomainName=logs-logprocessor | 8 |
| FunctionName=AIMonitor-editor | 7 |
| Resource=AIMonitor-editor | 6 |
| NodeId=5qqjVbSVSA6zlf1s5KOXjw | 4 |
| DeliveryStreamName=logprocessor-delivery-stream | 2 |
| ServiceName=AmazonDynamoDB | 1 |
| AccountId=111111111111 | 1 |
| TargetGroup=targetgroup/logprocessor-editor-tg/ae4d5204b39f6d11 | 1 |
| LoadBalancer=app/logprocessor-dashboards-alb/5d8c545e3ef05650 | 1 |
| Account | Count |
|---|---|
| 111111111111 | 20 |
| Service | Account | Today | 7-day Avg | Change |
|---|---|---|---|---|
| AmazonVPC | 111111111111 | $1.44 | $2.51 | -43% |
| AmazonOpenSearchService | 111111111111 | $1.41 | $4.01 | -65% |
| AmazonCloudWatch | 111111111111 | $1.21 | $2.82 | -57% |
| AWSSupportEssential | 111111111111 | $0.41 | $0.00 | new |
| AWSELB | 111111111111 | $0.36 | $0.63 | -43% |
| AmazonS3 | 111111111111 | $0.13 | $0.27 | -52% |
| AWSLambda | 111111111111 | $0.09 | $0.20 | -56% |
| awskms | 111111111111 | $0.05 | $0.10 | -48% |
| AmazonEC2 | 111111111111 | $0.05 | $0.08 | -41% |
| AWSMarketplace | 111111111111 | $0.02 | $0.01 | +100% |
| AmazonDynamoDB | 111111111111 | $0.01 | $0.02 | -52% |
| AWSQueueService | 111111111111 | $0.01 | $0.02 | -48% |
| AmazonKinesisFirehose | 111111111111 | $0.01 | $0.02 | -53% |
| Name | Type | Days | Start | Duration | Affected | Suppressed |
|---|---|---|---|---|---|---|
| Weekly | Scheduled | sun | 05:00 UTC / 01:00 (America/New_York) | 30m | all | 0 |
Training reflects how much historical data each subscription has collected. Ready subscriptions score anomalies accurately; Learning subscriptions may have elevated false-positive rates early on.
| Status | Count |
|---|---|
| Ready (scoring) | 18 |
| Learning (not yet scoring) | 5 |
| No data (metric not streaming) | 4 |
| AIMonitor Billing |
| ALB p95 response time |
| EC2 CPUCreditUsage |
| CloudWatch Firehose Delivery |
| Monitor successful deliveries to S3 to ensure data is being persisted |
| Firehose FailedValidation.Bytes |
| Monitor API call volume from remote account metric stream to detect unusual activity patterns |
| Firehose delivery lag (delivery backing up) |
| Lambda concurrency (approaching reserved limit) |
| Lambda max duration (timeout risk) |
| Lambda errors (all functions) |
| Lambda throttles (all functions) |
| OpenSearch cluster CPU utilization |
| OpenSearch free storage (running out) |
| OpenSearch indexing rate (sudden drop = ingestion problem) |
| OpenSearch JVM memory pressure |
| SQS message age (processing backlog) |
| SQS queue depth (backpressure) |
| ALB 5xx errors (10/288) |
| ALB target 5xx (backend errors) (2/288) |
| Billing EstimatedCharges (6/288) |
| EC2 CPU utilization (all instances) (2/288) |
| SNS failed notification deliveries (2/288) |
| API Gateway 5xx errors |
| API Gateway p95 latency |
| API Gateway Count |
| CloudFront 5xx error rate |
| Check | Value | Status |
|---|---|---|
| Detector Lambda errors (24h) | 0 | OK |
| Collector Lambda errors (24h) | 0 | OK |
| Firehose Transform errors (24h) | 0 | OK |
| Detector throttles (24h) | 0 | OK |
| Detector invocations (24h) | 313 | OK |
| Billing Processor errors (24h) | 0 | OK |
| Billing Processor invocations (48h) | 48 | OK |
| Discovery Lambda errors (24h) | 0 | OK |
| Discovery Lambda invocations (24h) | 5 | OK |