Impact of synthetic monitors on high/low traffic anomaly detection

[Enrico_F]

Does anybody know whether or not synthetic user sessions are considered for unexpected high/low traffic anomaly detection (as in actions/min) for an application?

Example: Would Dynatrace detect an anomaly if we were to deactivate a synthetic monitor for an application that has otherwise no real user traffic and for which the synthetic browser monitor has been running for a significant amount of time so that our good old friend Davis was given enough time to learn whatever it is supposed to learn about traffic patterns? This assumes both the application and the synthetic browser monitor are configured as part of the same tenant.

[AntonioSousa · Accepted solution]

Not absolutely sure, but considering the default setting that avoids over-alerting to applications that have less than 10 actions/min, it's almost sure Davis will not alert in that situation. You should check your application though, and eventually the global settings. The example below is for the default configuration of an application:

[Enrico_F]

Thanks for the feedback. My question/example assumes the synthetic traffic alone is well above the low traffic limit as per the applied anomaly detection settings.