[Logs UI] Create API route to access rare log category analysis results

[weltenwort]

Summary

This route grants access to the rare log category anomaly detection results within a given time interval.

Acceptance criteria

Request

Path: POST /api/infra/log_analysis/results/rare_log_categories

interface GetRareLogCategoriesRequest {
  data: {
    // the id of the source this job belongs to
    sourceId: string;
    timeRange: {
      // start of the requested time interval as an epoch timestamp
      startTime: number;
      // end of the requested time interval as an epoch timestamp
      endTime: number;
    };
    // the requested number of categories
    size: number;
  };
}

Responses

interface GetRareLogCategoriesSuccessResponse {
  data: {
    rareCategories: Array<{
      // the automatically generated id of the category
      categoryId: string;
      bucketBoundaries: {
        // start of the bucket as an epoch timestamp
        startTime: number;
        // end of the bucket as an epoch timestamp
        endTime: number;
      };
      // the probability of the bucket behaving like it is
      probability: number;
      // a relative measure of the anomalousness
      anomalyScore: number;
      // a set of example values from this category
      exampleValues: any[];
    }>;
  };
}

Failure conditions:

• no matching job configured for this source: Not Found
• insufficient permissions: Forbidden

[elasticmachine]

Pinging @elastic/infra-logs-ui