Hi,
there’s a question in the anomaly detection practice quiz that asks whether we should use supervised learning or anomaly detection to monitor machines in a data center. We have a lot of data points on normal and abnormal behavior.
I’m not going to reveal the answer, I’m just going to say that I feel like we can go either way. It could be argued there is enough data to learn to detect all variants of already seen anomalies but it could also be argued (and this is from the lectures) that we should stick with anomaly detection because there will be new anomaly variants in the near future due to new security issues.
Thoughts?