Are there any recommendations how to finetune the usage anomaly detection and warnings. We get these every day on various projects. We host web applications which are not continuosly used. Sometimes just for an hour each day. Sometimes just for an hour each week. Would it be possible to flag usage anomalies as regular/expected use in order to build up a model and only warn if the usage in fact significantly deviates from previous occurances flagged as expected.