# Anomaly detection alerts

**URL:** <https://forum.search-guard.com/t/anomaly-detection-alerts/2210>\
**Category:** Signals Alerting\
**Created:** [September 5, 2021, 3:35pm UTC](https://forum.search-guard.com/t/anomaly-detection-alerts/2210 "2021-09-05T15:35:33Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![lior-fort](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/lior-fort/32/1064_2.png) [@lior-fort](https://forum.search-guard.com/u/lior-fort)\
**Post date:** [September 5, 2021, 3:35pm UTC](https://forum.search-guard.com/t/anomaly-detection-alerts/2210/1 "2021-09-05T15:35:33Z")

</div>

Hello,

I’m using Elasticsearch 7.14 (currently on the Elastic cloud)

I’m new to Search guard, just found it on the web…

I wanted to ask please weather it’s possible to use the Anomalies engine without the security features, or is there a dependency.

also- does it work with ML?

thanks!

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/pablo/32/1443_2.png) [@pablo](https://forum.search-guard.com/u/pablo)\
**Post date:** [September 6, 2021, 10:20am UTC](https://forum.search-guard.com/t/anomaly-detection-alerts/2210/2 "2021-09-06T10:20:09Z")

</div>

Hello @lior-fort

Search Guard plug-in requires xpack.security to be disabled in elasticsearch.yml config file. As far as I’m aware Elasticsearch is deployed as a service in the Elastic cloud. This means you won’t have access to OS-level config files.

Is your aim to use Elastic Cloud or have ELK stack on-premise?

---

<div class="post-metadata">

**Author:** ![lior-fort](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/lior-fort/32/1064_2.png) [@lior-fort](https://forum.search-guard.com/u/lior-fort)\
**Post date:** [September 7, 2021, 7:18pm UTC](https://forum.search-guard.com/t/anomaly-detection-alerts/2210/3 "2021-09-07T19:18:02Z")

</div>

Hi @pablo

I’m interested in on prem solution

Thanks

---

<div class="post-metadata">

**Author:** ![sirHusky](https://avatars.discourse-cdn.com/v4/letter/s/e9a140/32.png) [@sirHusky](https://forum.search-guard.com/u/sirHusky)\
**Post date:** [September 8, 2021, 4:10pm UTC](https://forum.search-guard.com/t/anomaly-detection-alerts/2210/4 "2021-09-08T16:10:09Z")

</div>

@lior-fort  
Can you elaborate on what Anomalies engine (and ML) you are referring to?

If you are referring to elastic’s offering of Anomalies detection (as part of the ML engine) this would require a subscription with elastic, as this is not covered under free tier.

Regarding Search guard’s ability to work with ML, yes, there is no issue whatsoever, see further info [here](https://docs.search-guard.com/latest/search-guard-xpack-machine-learning)

---

<div class="post-metadata">

**Author:** ![lior-fort](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/lior-fort/32/1064_2.png) [@lior-fort](https://forum.search-guard.com/u/lior-fort)\
**Post date:** [September 8, 2021, 8:01pm UTC](https://forum.search-guard.com/t/anomaly-detection-alerts/2210/5 "2021-09-08T20:01:35Z")

</div>

I hope I’m not confusing the search guard alerts with something it’s not, but I’m looking for alternative to Elastic ml for anomalies detection

Thanks!

---

<div class="post-metadata">

**Author:** ![sirHusky](https://avatars.discourse-cdn.com/v4/letter/s/e9a140/32.png) [@sirHusky](https://forum.search-guard.com/u/sirHusky)\
**Post date:** [September 9, 2021, 9:09am UTC](https://forum.search-guard.com/t/anomaly-detection-alerts/2210/6 "2021-09-09T09:09:04Z")

</div>

@lior-fort Search guard Alerting provides anomalies detection, however this is different to elastic’s ML anomalies detection, there is a good tutorial [here](https://www.youtube.com/watch?v=Big_niMxQJ4&t=2337s&ab_channel=SearchGuard)

Regarding using Alerting without security features, which features are you referring to? The TLS on transport level is mandatory. The rest can be disabled and anonymous access used to connect if you so wish

Hope this helps