ANOMALY DETECTION FOR NETWORK DEVICES USING INTENT-BASED ANALYTICS

A controller device includes one or more processors and a memory for storing instructions that, when executed, cause the one or more processors to receive, from a set of network devices in a network, a time series of telemetry data; determine, using telemetry data, a threshold for a parameter of a network device of the set of network devices; in response to reception of an indication that an instant value for the parameter does not satisfy the determined threshold for the parameter, determine that an anomaly has occurred at the network device; in response to the determination, generate a user interface having first data for a first time period that occurs before the anomaly, second data for a second time period corresponding to when the anomaly occurs in the network, and third data for a third time period that occurs after the anomaly.