Open anomaly detection jobs APIedit

Opens one or more anomaly detection jobs.


POST _ml/anomaly_detectors/{job_id}/_open


  • If the Elasticsearch security features are enabled, you must have manage_ml or manage cluster privileges to use this API. See Security privileges.


An anomaly detection job must be opened in order for it to be ready to receive and analyze data. It can be opened and closed multiple times throughout its lifecycle.

When you open a new job, it starts with an empty model.

When you open an existing job, the most recent model state is automatically loaded. The job is ready to resume its analysis from where it left off, once new data is received.

Path parametersedit

(Required, string) Identifier for the anomaly detection job.

Request bodyedit

(Optional, time) Controls the time to wait until a job has opened. The default value is 30 minutes.


The following example opens the total-requests job and sets an optional property:

POST _ml/anomaly_detectors/total-requests/_open
  "timeout": "35m"

When the job opens, you receive the following results:

  "opened": true