Anomaly Status¶
Every anomaly carries a status that tracks its lifecycle stage, from initial detection to final resolution. Statuses split into two groups: Open, for anomalies that still need attention, and Archived, for anomalies that have been resolved, dismissed, or categorized for reference.
To filter the anomaly list by these groups in the UI, see Filter Anomalies by Status.
Status colors¶
Each status has a distinctive color, kept consistent across the UI (anomaly lists, details views, and notifications). The icon next to a status can change by context, but the color stays the same. The legend below shows the color associated with each status:
| Icon | Status | Description |
|---|---|---|
| Active | Unresolved and awaiting triage. | |
| Acknowledged | Reviewed, still needs follow-up. | |
| Resolved | Legitimate concern that has been addressed. | |
| Duplicate | Same issue as another anomaly. | |
| Invalid | Not a real data quality concern. | |
| Discarded | No longer relevant or under review. |
Open Anomalies¶
Open anomalies are issues that have been detected but not yet resolved or archived. They have two sub-statuses:
| Status | Description |
|---|---|
| Active | Newly detected and unresolved. Has not been acknowledged, archived, or resolved. May require immediate attention. |
| Acknowledged | Reviewed and acknowledged by someone, but still needs further action. |
To view every open anomaly at once regardless of sub-status, use the All sub-tab in the anomaly list; see Filter Anomalies by Status.
Archived Anomalies¶
Archived anomalies have been reviewed and moved out of active monitoring. They are categorized by how they were resolved or classified, keeping a clean historical record without cluttering the active list. They have four sub-statuses:
| Status | Description |
|---|---|
| Resolved | Was a legitimate data quality concern, now addressed. |
| Duplicate | A duplicate of another anomaly that has already been addressed. |
| Invalid | Not a legitimate concern; no further action required. |
| Discarded | No longer relevant or under review. Removes outdated entries without marking them as Invalid or Resolved. |
To view every archived anomaly at once regardless of sub-status, use the All sub-tab in the anomaly list; see Filter Anomalies by Status.
What happens when an archived anomaly is detected again
Every archived status removes the anomaly from the open list, but they behave differently when a later scan detects the same fingerprint:
- Duplicate: the archived anomaly is never reopened. A new detection still creates a new Active anomaly, so Duplicate does not silence the issue if it returns.
- Resolved, Invalid, and Discarded: when the scan runs with both Archive Duplicate Anomalies and Reactivate Recurring Anomalies turned on, the archived anomaly is reopened as Active and the new detection is marked Duplicate.
You do not need to reference an "original anomaly ID" when archiving as Duplicate. A new detection is linked to the earliest matching anomaly that is still open or has been reopened. See Anomaly Fingerprints for matching criteria and the re-opening option.
Note
For step-by-step instructions, see Archive Anomalies or Restore Anomalies.