gaogaiga@tg
says to
YSITD
舊的abnormal detection是用一堆rules,不同weighting，然後總和trigger到就有alert這樣吧