From 69acf9ccf34f8f6e490ecddf1bbdda8f08e11ba1 Mon Sep 17 00:00:00 2001
From: Valeriy Khakhutskyy <1292899+valeriy42@users.noreply.github.com>
Date: Thu, 25 Jul 2024 10:30:52 +0200
Subject: [PATCH] [ML] Add explanation of typical location (#2753)

(cherry picked from commit ffe6cd0ad7c17c3d1de2525fdcc0ad2a71c66c13)
---
 .../stack/ml/anomaly-detection/geographic-anomalies.asciidoc | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/docs/en/stack/ml/anomaly-detection/geographic-anomalies.asciidoc b/docs/en/stack/ml/anomaly-detection/geographic-anomalies.asciidoc
index 02bcae275..99f52ff3f 100644
--- a/docs/en/stack/ml/anomaly-detection/geographic-anomalies.asciidoc
+++ b/docs/en/stack/ml/anomaly-detection/geographic-anomalies.asciidoc
@@ -211,6 +211,11 @@ behavior:
 image::images/ecommerce-anomaly-explorer-geopoint.jpg[A screenshot of an anomalous event in the eCommerce data in Anomaly Explorer]
 // NOTE: This is an autogenerated screenshot. Do not edit it directly.
 
+A "typical" value indicates a centroid of a cluster of previously observed 
+locations that is closest to the "actual" location at that time. For example, 
+there may be one centroid near the user's home and another near the user's 
+work place since there are many records associated with these distinct locations. 
+
 Likewise, there are time periods in the web logs sample data where there are
 both unusually high sums of data transferred and unusual geographical
 coordinates: