What is the minimum number of entities a KPI must be split by in order to use Entity Cohesion anomaly detection?

For Entity Cohesion anomaly detection in Splunk IT Service Intelligence (ITSI), the minimum number

of entities a KPI must be split by is 2. Entity Cohesion as a method of anomaly detection focuses on

identifying anomalies based on the deviation of an entity's behavior in comparison to other entities

within the same group or cohort. By requiring a minimum of only two entities, ITSI allows for the

comparison of entities to detect significant deviations in one entity's performance or behavior, which

could indicate potential issues. This method leverages the idea that entities performing similar

functions or within the same service should exhibit similar patterns of behavior, and significant

deviations could be indicative of anomalies. The low minimum requirement of two entities ensures

that this powerful anomaly detection feature can be utilized even in smaller environments.