[
  {
    "model": "app.behaviormetric",
    "pk": 1,
    "fields": {
      "catalogue": "metrics-v1",
      "name": "sign_ins_per_day",
      "unit": "count",
      "watch_direction": "high"
    }
  },
  {
    "model": "app.behaviormetric",
    "pk": 2,
    "fields": {
      "catalogue": "metrics-v1",
      "name": "distinct_hosts_reached",
      "unit": "count",
      "watch_direction": "high"
    }
  },
  {
    "model": "app.behaviormetric",
    "pk": 3,
    "fields": {
      "catalogue": "metrics-v1",
      "name": "megabytes_uploaded",
      "unit": "megabytes",
      "watch_direction": "high"
    }
  },
  {
    "model": "app.behaviormetric",
    "pk": 4,
    "fields": {
      "catalogue": "metrics-v1",
      "name": "failed_authentications",
      "unit": "count",
      "watch_direction": "high"
    }
  },
  {
    "model": "app.behaviormetric",
    "pk": 5,
    "fields": {
      "catalogue": "metrics-v1",
      "name": "after_hours_actions",
      "unit": "count",
      "watch_direction": "high"
    }
  },
  {
    "model": "app.behaviormetric",
    "pk": 6,
    "fields": {
      "catalogue": "metrics-v1",
      "name": "privileged_commands",
      "unit": "count",
      "watch_direction": "high"
    }
  },
  {
    "model": "app.entity",
    "pk": 1,
    "fields": {
      "entity_ref": "ENT-75803",
      "entity_type": "service_account",
      "department": "Operations",
      "first_profiled_on": "2025-02-21"
    }
  },
  {
    "model": "app.entity",
    "pk": 2,
    "fields": {
      "entity_ref": "ENT-50321",
      "entity_type": "service_account",
      "department": "IT",
      "first_profiled_on": "2025-03-23"
    }
  },
  {
    "model": "app.entity",
    "pk": 3,
    "fields": {
      "entity_ref": "ENT-32577",
      "entity_type": "user",
      "department": "Sales",
      "first_profiled_on": "2025-01-22"
    }
  },
  {
    "model": "app.entity",
    "pk": 4,
    "fields": {
      "entity_ref": "ENT-05848",
      "entity_type": "user",
      "department": "Sales",
      "first_profiled_on": "2025-01-29"
    }
  },
  {
    "model": "app.entity",
    "pk": 5,
    "fields": {
      "entity_ref": "ENT-47781",
      "entity_type": "user",
      "department": "Sales",
      "first_profiled_on": "2025-01-24"
    }
  },
  {
    "model": "app.entity",
    "pk": 6,
    "fields": {
      "entity_ref": "ENT-51116",
      "entity_type": "service_account",
      "department": "Engineering",
      "first_profiled_on": "2025-02-15"
    }
  },
  {
    "model": "app.entity",
    "pk": 7,
    "fields": {
      "entity_ref": "ENT-18904",
      "entity_type": "service_account",
      "department": "Finance",
      "first_profiled_on": "2025-01-25"
    }
  },
  {
    "model": "app.entity",
    "pk": 8,
    "fields": {
      "entity_ref": "ENT-63497",
      "entity_type": "service_account",
      "department": "IT",
      "first_profiled_on": "2025-02-07"
    }
  },
  {
    "model": "app.entity",
    "pk": 9,
    "fields": {
      "entity_ref": "ENT-63324",
      "entity_type": "service_account",
      "department": "Finance",
      "first_profiled_on": "2025-03-06"
    }
  },
  {
    "model": "app.entity",
    "pk": 10,
    "fields": {
      "entity_ref": "ENT-96430",
      "entity_type": "user",
      "department": "IT",
      "first_profiled_on": "2025-01-02"
    }
  },
  {
    "model": "app.entity",
    "pk": 11,
    "fields": {
      "entity_ref": "ENT-79749",
      "entity_type": "user",
      "department": "Sales",
      "first_profiled_on": "2025-03-17"
    }
  },
  {
    "model": "app.entity",
    "pk": 12,
    "fields": {
      "entity_ref": "ENT-35909",
      "entity_type": "service_account",
      "department": "Sales",
      "first_profiled_on": "2025-02-11"
    }
  },
  {
    "model": "app.entity",
    "pk": 13,
    "fields": {
      "entity_ref": "ENT-06885",
      "entity_type": "service_account",
      "department": "Finance",
      "first_profiled_on": "2025-01-24"
    }
  },
  {
    "model": "app.entity",
    "pk": 14,
    "fields": {
      "entity_ref": "ENT-62644",
      "entity_type": "user",
      "department": "Operations",
      "first_profiled_on": "2025-01-15"
    }
  },
  {
    "model": "app.entity",
    "pk": 15,
    "fields": {
      "entity_ref": "ENT-37706",
      "entity_type": "service_account",
      "department": "IT",
      "first_profiled_on": "2025-01-22"
    }
  },
  {
    "model": "app.entity",
    "pk": 16,
    "fields": {
      "entity_ref": "ENT-77048",
      "entity_type": "service_account",
      "department": "Finance",
      "first_profiled_on": "2025-02-27"
    }
  },
  {
    "model": "app.entity",
    "pk": 17,
    "fields": {
      "entity_ref": "ENT-78367",
      "entity_type": "service_account",
      "department": "IT",
      "first_profiled_on": "2025-01-16"
    }
  },
  {
    "model": "app.entity",
    "pk": 18,
    "fields": {
      "entity_ref": "ENT-78181",
      "entity_type": "user",
      "department": "IT",
      "first_profiled_on": "2025-02-15"
    }
  },
  {
    "model": "app.entity",
    "pk": 19,
    "fields": {
      "entity_ref": "ENT-47450",
      "entity_type": "user",
      "department": "Operations",
      "first_profiled_on": "2025-03-10"
    }
  },
  {
    "model": "app.entity",
    "pk": 20,
    "fields": {
      "entity_ref": "ENT-42317",
      "entity_type": "user",
      "department": "IT",
      "first_profiled_on": "2025-01-16"
    }
  },
  {
    "model": "app.entity",
    "pk": 21,
    "fields": {
      "entity_ref": "ENT-75729",
      "entity_type": "service_account",
      "department": "Engineering",
      "first_profiled_on": "2025-01-06"
    }
  },
  {
    "model": "app.entity",
    "pk": 22,
    "fields": {
      "entity_ref": "ENT-75801",
      "entity_type": "service_account",
      "department": "IT",
      "first_profiled_on": "2025-03-09"
    }
  },
  {
    "model": "app.entity",
    "pk": 23,
    "fields": {
      "entity_ref": "ENT-93344",
      "entity_type": "user",
      "department": "Legal",
      "first_profiled_on": "2025-03-13"
    }
  },
  {
    "model": "app.entity",
    "pk": 24,
    "fields": {
      "entity_ref": "ENT-74646",
      "entity_type": "user",
      "department": "Legal",
      "first_profiled_on": "2025-03-16"
    }
  },
  {
    "model": "app.entity",
    "pk": 25,
    "fields": {
      "entity_ref": "ENT-07654",
      "entity_type": "service_account",
      "department": "Sales",
      "first_profiled_on": "2025-02-23"
    }
  },
  {
    "model": "app.entity",
    "pk": 26,
    "fields": {
      "entity_ref": "ENT-09739",
      "entity_type": "user",
      "department": "IT",
      "first_profiled_on": "2025-03-07"
    }
  },
  {
    "model": "app.entity",
    "pk": 27,
    "fields": {
      "entity_ref": "ENT-12403",
      "entity_type": "user",
      "department": "Finance",
      "first_profiled_on": "2025-02-06"
    }
  },
  {
    "model": "app.entity",
    "pk": 28,
    "fields": {
      "entity_ref": "ENT-16456",
      "entity_type": "user",
      "department": "Operations",
      "first_profiled_on": "2025-01-06"
    }
  },
  {
    "model": "app.entity",
    "pk": 29,
    "fields": {
      "entity_ref": "ENT-14207",
      "entity_type": "server",
      "department": "Sales",
      "first_profiled_on": "2025-01-16"
    }
  },
  {
    "model": "app.entity",
    "pk": 30,
    "fields": {
      "entity_ref": "ENT-44326",
      "entity_type": "server",
      "department": "IT",
      "first_profiled_on": "2025-02-12"
    }
  },
  {
    "model": "app.entity",
    "pk": 31,
    "fields": {
      "entity_ref": "ENT-03918",
      "entity_type": "server",
      "department": "Operations",
      "first_profiled_on": "2025-03-11"
    }
  },
  {
    "model": "app.entity",
    "pk": 32,
    "fields": {
      "entity_ref": "ENT-35919",
      "entity_type": "user",
      "department": "Finance",
      "first_profiled_on": "2025-03-01"
    }
  },
  {
    "model": "app.entity",
    "pk": 33,
    "fields": {
      "entity_ref": "ENT-90043",
      "entity_type": "user",
      "department": "Legal",
      "first_profiled_on": "2025-01-18"
    }
  },
  {
    "model": "app.entity",
    "pk": 34,
    "fields": {
      "entity_ref": "ENT-12893",
      "entity_type": "service_account",
      "department": "Sales",
      "first_profiled_on": "2025-02-15"
    }
  },
  {
    "model": "app.entity",
    "pk": 35,
    "fields": {
      "entity_ref": "ENT-84704",
      "entity_type": "user",
      "department": "IT",
      "first_profiled_on": "2025-02-16"
    }
  },
  {
    "model": "app.entity",
    "pk": 36,
    "fields": {
      "entity_ref": "ENT-45394",
      "entity_type": "user",
      "department": "Engineering",
      "first_profiled_on": "2025-01-06"
    }
  },
  {
    "model": "app.entity",
    "pk": 37,
    "fields": {
      "entity_ref": "ENT-87233",
      "entity_type": "service_account",
      "department": "IT",
      "first_profiled_on": "2025-03-14"
    }
  },
  {
    "model": "app.entity",
    "pk": 38,
    "fields": {
      "entity_ref": "ENT-70454",
      "entity_type": "service_account",
      "department": "Legal",
      "first_profiled_on": "2025-01-16"
    }
  },
  {
    "model": "app.entity",
    "pk": 39,
    "fields": {
      "entity_ref": "ENT-56476",
      "entity_type": "service_account",
      "department": "Engineering",
      "first_profiled_on": "2025-02-20"
    }
  },
  {
    "model": "app.entity",
    "pk": 40,
    "fields": {
      "entity_ref": "ENT-07716",
      "entity_type": "service_account",
      "department": "Engineering",
      "first_profiled_on": "2025-02-20"
    }
  },
  {
    "model": "app.baseline",
    "pk": 1,
    "fields": {
      "entity": 39,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 44,
      "baseline_mean": "46.46",
      "baseline_stddev": "3.55",
      "computed_on": "2025-04-19T02:30:54Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 2,
    "fields": {
      "entity": 16,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 33,
      "baseline_mean": "47.77",
      "baseline_stddev": "8.91",
      "computed_on": "2025-03-28T15:28:25Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 3,
    "fields": {
      "entity": 7,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 23,
      "baseline_mean": "54.01",
      "baseline_stddev": "8.84",
      "computed_on": "2025-03-18T03:18:37Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 4,
    "fields": {
      "entity": 24,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 26,
      "baseline_mean": "27.18",
      "baseline_stddev": "6.73",
      "computed_on": "2025-04-14T16:42:44Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 5,
    "fields": {
      "entity": 30,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 47,
      "baseline_mean": "22.54",
      "baseline_stddev": "5.73",
      "computed_on": "2025-03-05T02:35:56Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 6,
    "fields": {
      "entity": 16,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 28,
      "baseline_mean": "32.76",
      "baseline_stddev": "4.46",
      "computed_on": "2025-03-28T12:35:22Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 7,
    "fields": {
      "entity": 25,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 58,
      "baseline_mean": "28.55",
      "baseline_stddev": "7.85",
      "computed_on": "2025-04-21T09:04:55Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 8,
    "fields": {
      "entity": 7,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 30,
      "baseline_mean": "55.56",
      "baseline_stddev": "8.65",
      "computed_on": "2025-02-27T10:02:28Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 9,
    "fields": {
      "entity": 6,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 44,
      "baseline_mean": "26.84",
      "baseline_stddev": "3.25",
      "computed_on": "2025-03-19T02:27:28Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 10,
    "fields": {
      "entity": 10,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 20,
      "baseline_mean": "42.61",
      "baseline_stddev": "5.85",
      "computed_on": "2025-01-15T22:15:05Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 11,
    "fields": {
      "entity": 33,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 59,
      "baseline_mean": "41.52",
      "baseline_stddev": "3.02",
      "computed_on": "2025-01-28T10:24:37Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 12,
    "fields": {
      "entity": 18,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 41,
      "baseline_mean": "44.31",
      "baseline_stddev": "6.55",
      "computed_on": "2025-04-13T10:10:44Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 13,
    "fields": {
      "entity": 22,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 32,
      "baseline_mean": "61.90",
      "baseline_stddev": "3.17",
      "computed_on": "2025-04-20T09:31:12Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 14,
    "fields": {
      "entity": 4,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 45,
      "baseline_mean": "46.78",
      "baseline_stddev": "5.64",
      "computed_on": "2025-02-18T07:53:29Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 15,
    "fields": {
      "entity": 16,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 50,
      "baseline_mean": "42.09",
      "baseline_stddev": "7.79",
      "computed_on": "2025-03-20T13:44:19Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 16,
    "fields": {
      "entity": 5,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 27,
      "baseline_mean": "54.84",
      "baseline_stddev": "8.29",
      "computed_on": "2025-01-29T00:16:28Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 17,
    "fields": {
      "entity": 14,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 43,
      "baseline_mean": "48.00",
      "baseline_stddev": "7.45",
      "computed_on": "2025-02-17T15:22:57Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 18,
    "fields": {
      "entity": 30,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 25,
      "baseline_mean": "39.22",
      "baseline_stddev": "4.32",
      "computed_on": "2025-03-10T06:57:34Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 19,
    "fields": {
      "entity": 3,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 29,
      "baseline_mean": "52.60",
      "baseline_stddev": "3.78",
      "computed_on": "2025-01-27T18:22:11Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 20,
    "fields": {
      "entity": 19,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 42,
      "baseline_mean": "25.44",
      "baseline_stddev": "7.26",
      "computed_on": "2025-04-26T22:14:58Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 21,
    "fields": {
      "entity": 1,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 59,
      "baseline_mean": "44.88",
      "baseline_stddev": "5.51",
      "computed_on": "2025-03-01T04:14:11Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 22,
    "fields": {
      "entity": 35,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 39,
      "baseline_mean": "40.23",
      "baseline_stddev": "3.26",
      "computed_on": "2025-04-02T06:20:53Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 23,
    "fields": {
      "entity": 36,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 53,
      "baseline_mean": "32.70",
      "baseline_stddev": "8.92",
      "computed_on": "2025-03-04T02:54:44Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 24,
    "fields": {
      "entity": 33,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 54,
      "baseline_mean": "50.31",
      "baseline_stddev": "4.67",
      "computed_on": "2025-01-21T02:53:32Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 25,
    "fields": {
      "entity": 39,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 29,
      "baseline_mean": "43.96",
      "baseline_stddev": "4.00",
      "computed_on": "2025-04-07T20:52:50Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 26,
    "fields": {
      "entity": 18,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 21,
      "baseline_mean": "16.89",
      "baseline_stddev": "7.02",
      "computed_on": "2025-03-12T22:29:44Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 27,
    "fields": {
      "entity": 40,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 25,
      "baseline_mean": "28.42",
      "baseline_stddev": "7.59",
      "computed_on": "2025-02-24T12:23:46Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 28,
    "fields": {
      "entity": 34,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 31,
      "baseline_mean": "31.73",
      "baseline_stddev": "7.70",
      "computed_on": "2025-03-22T15:24:20Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 29,
    "fields": {
      "entity": 28,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 23,
      "baseline_mean": "52.00",
      "baseline_stddev": "4.99",
      "computed_on": "2025-01-31T19:55:18Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 30,
    "fields": {
      "entity": 18,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 18,
      "baseline_mean": "46.52",
      "baseline_stddev": "3.93",
      "computed_on": "2025-02-27T22:43:12Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 31,
    "fields": {
      "entity": 12,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 36,
      "baseline_mean": "38.29",
      "baseline_stddev": "4.56",
      "computed_on": "2025-03-22T15:50:01Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 32,
    "fields": {
      "entity": 7,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 47,
      "baseline_mean": "40.12",
      "baseline_stddev": "5.36",
      "computed_on": "2025-02-17T04:42:30Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 33,
    "fields": {
      "entity": 30,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 17,
      "baseline_mean": "32.15",
      "baseline_stddev": "6.52",
      "computed_on": "2025-02-19T12:50:10Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 34,
    "fields": {
      "entity": 35,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 17,
      "baseline_mean": "46.49",
      "baseline_stddev": "3.50",
      "computed_on": "2025-03-17T06:36:50Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 35,
    "fields": {
      "entity": 33,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 48,
      "baseline_mean": "36.56",
      "baseline_stddev": "6.43",
      "computed_on": "2025-02-13T19:53:40Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 36,
    "fields": {
      "entity": 20,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 49,
      "baseline_mean": "36.23",
      "baseline_stddev": "6.56",
      "computed_on": "2025-03-01T19:22:41Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 37,
    "fields": {
      "entity": 19,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 30,
      "baseline_mean": "41.39",
      "baseline_stddev": "5.66",
      "computed_on": "2025-03-20T07:47:16Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 38,
    "fields": {
      "entity": 29,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 56,
      "baseline_mean": "42.41",
      "baseline_stddev": "3.37",
      "computed_on": "2025-02-28T08:52:18Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 39,
    "fields": {
      "entity": 5,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 26,
      "baseline_mean": "21.86",
      "baseline_stddev": "5.81",
      "computed_on": "2025-03-04T15:16:39Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 40,
    "fields": {
      "entity": 18,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 21,
      "baseline_mean": "45.77",
      "baseline_stddev": "8.30",
      "computed_on": "2025-02-18T19:41:19Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 41,
    "fields": {
      "entity": 15,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 56,
      "baseline_mean": "32.62",
      "baseline_stddev": "7.61",
      "computed_on": "2025-02-12T22:53:12Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 42,
    "fields": {
      "entity": 34,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 20,
      "baseline_mean": "46.25",
      "baseline_stddev": "3.74",
      "computed_on": "2025-03-23T22:48:29Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 43,
    "fields": {
      "entity": 6,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 31,
      "baseline_mean": "39.67",
      "baseline_stddev": "8.45",
      "computed_on": "2025-03-16T06:24:59Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 44,
    "fields": {
      "entity": 34,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 51,
      "baseline_mean": "59.76",
      "baseline_stddev": "4.32",
      "computed_on": "2025-04-13T18:22:06Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 45,
    "fields": {
      "entity": 32,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 34,
      "baseline_mean": "32.31",
      "baseline_stddev": "3.18",
      "computed_on": "2025-03-14T19:59:32Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 46,
    "fields": {
      "entity": 8,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 56,
      "baseline_mean": "38.01",
      "baseline_stddev": "7.08",
      "computed_on": "2025-03-25T05:03:09Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 47,
    "fields": {
      "entity": 23,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 35,
      "baseline_mean": "37.08",
      "baseline_stddev": "5.21",
      "computed_on": "2025-04-26T11:16:44Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 48,
    "fields": {
      "entity": 34,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 59,
      "baseline_mean": "48.10",
      "baseline_stddev": "7.35",
      "computed_on": "2025-03-28T01:42:38Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 49,
    "fields": {
      "entity": 19,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 56,
      "baseline_mean": "37.40",
      "baseline_stddev": "4.51",
      "computed_on": "2025-04-14T12:48:02Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 50,
    "fields": {
      "entity": 1,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 34,
      "baseline_mean": "49.01",
      "baseline_stddev": "6.94",
      "computed_on": "2025-04-02T18:37:40Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 51,
    "fields": {
      "entity": 11,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 51,
      "baseline_mean": "53.84",
      "baseline_stddev": "5.26",
      "computed_on": "2025-04-01T19:13:23Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 52,
    "fields": {
      "entity": 29,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 42,
      "baseline_mean": "37.89",
      "baseline_stddev": "4.48",
      "computed_on": "2025-01-20T17:05:37Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 53,
    "fields": {
      "entity": 19,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 45,
      "baseline_mean": "51.31",
      "baseline_stddev": "5.50",
      "computed_on": "2025-03-11T01:33:47Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 54,
    "fields": {
      "entity": 23,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 15,
      "baseline_mean": "30.46",
      "baseline_stddev": "4.78",
      "computed_on": "2025-04-19T08:41:46Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 55,
    "fields": {
      "entity": 32,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 45,
      "baseline_mean": "37.02",
      "baseline_stddev": "4.74",
      "computed_on": "2025-04-10T23:10:24Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 56,
    "fields": {
      "entity": 6,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 42,
      "baseline_mean": "40.15",
      "baseline_stddev": "7.54",
      "computed_on": "2025-02-27T01:57:25Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 57,
    "fields": {
      "entity": 8,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 26,
      "baseline_mean": "45.61",
      "baseline_stddev": "5.33",
      "computed_on": "2025-02-09T15:21:25Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 58,
    "fields": {
      "entity": 25,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 60,
      "baseline_mean": "48.48",
      "baseline_stddev": "5.35",
      "computed_on": "2025-04-18T07:20:25Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 59,
    "fields": {
      "entity": 23,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 18,
      "baseline_mean": "47.73",
      "baseline_stddev": "7.79",
      "computed_on": "2025-03-22T01:21:23Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 60,
    "fields": {
      "entity": 32,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 51,
      "baseline_mean": "47.83",
      "baseline_stddev": "3.27",
      "computed_on": "2025-04-27T04:42:08Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 61,
    "fields": {
      "entity": 2,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 43,
      "baseline_mean": "25.55",
      "baseline_stddev": "6.65",
      "computed_on": "2025-05-06T21:27:21Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 62,
    "fields": {
      "entity": 10,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 39,
      "baseline_mean": "34.58",
      "baseline_stddev": "4.26",
      "computed_on": "2025-02-19T23:52:26Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 63,
    "fields": {
      "entity": 20,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 39,
      "baseline_mean": "31.54",
      "baseline_stddev": "8.17",
      "computed_on": "2025-01-24T12:34:07Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 64,
    "fields": {
      "entity": 27,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 52,
      "baseline_mean": "35.69",
      "baseline_stddev": "7.14",
      "computed_on": "2025-04-01T16:15:15Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 65,
    "fields": {
      "entity": 24,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 54,
      "baseline_mean": "47.99",
      "baseline_stddev": "3.71",
      "computed_on": "2025-04-15T19:46:22Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 66,
    "fields": {
      "entity": 14,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 53,
      "baseline_mean": "33.35",
      "baseline_stddev": "3.50",
      "computed_on": "2025-02-24T18:47:15Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 67,
    "fields": {
      "entity": 22,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 39,
      "baseline_mean": "48.61",
      "baseline_stddev": "4.64",
      "computed_on": "2025-03-31T07:17:32Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 68,
    "fields": {
      "entity": 33,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 48,
      "baseline_mean": "33.67",
      "baseline_stddev": "8.84",
      "computed_on": "2025-02-20T21:46:03Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 69,
    "fields": {
      "entity": 19,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 36,
      "baseline_mean": "35.74",
      "baseline_stddev": "3.99",
      "computed_on": "2025-05-07T01:10:08Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 70,
    "fields": {
      "entity": 29,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 57,
      "baseline_mean": "42.29",
      "baseline_stddev": "6.47",
      "computed_on": "2025-01-18T22:01:37Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 71,
    "fields": {
      "entity": 1,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 17,
      "baseline_mean": "45.63",
      "baseline_stddev": "8.74",
      "computed_on": "2025-03-24T06:06:20Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 72,
    "fields": {
      "entity": 13,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 43,
      "baseline_mean": "42.65",
      "baseline_stddev": "5.51",
      "computed_on": "2025-03-06T12:57:57Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 73,
    "fields": {
      "entity": 21,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 55,
      "baseline_mean": "42.87",
      "baseline_stddev": "5.14",
      "computed_on": "2025-01-07T15:35:52Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 74,
    "fields": {
      "entity": 12,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 32,
      "baseline_mean": "49.44",
      "baseline_stddev": "3.24",
      "computed_on": "2025-03-31T20:09:11Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 75,
    "fields": {
      "entity": 9,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 40,
      "baseline_mean": "22.05",
      "baseline_stddev": "6.18",
      "computed_on": "2025-04-19T13:05:48Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 76,
    "fields": {
      "entity": 38,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 53,
      "baseline_mean": "48.32",
      "baseline_stddev": "5.99",
      "computed_on": "2025-03-06T20:11:08Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 77,
    "fields": {
      "entity": 22,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 40,
      "baseline_mean": "34.60",
      "baseline_stddev": "4.88",
      "computed_on": "2025-05-04T19:47:12Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 78,
    "fields": {
      "entity": 34,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 58,
      "baseline_mean": "30.32",
      "baseline_stddev": "5.52",
      "computed_on": "2025-04-06T16:27:45Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 79,
    "fields": {
      "entity": 26,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 58,
      "baseline_mean": "52.50",
      "baseline_stddev": "5.32",
      "computed_on": "2025-04-18T04:51:55Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 80,
    "fields": {
      "entity": 29,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 15,
      "baseline_mean": "24.25",
      "baseline_stddev": "3.09",
      "computed_on": "2025-01-21T23:35:53Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 81,
    "fields": {
      "entity": 21,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 41,
      "baseline_mean": "29.58",
      "baseline_stddev": "7.02",
      "computed_on": "2025-02-09T15:31:13Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 82,
    "fields": {
      "entity": 4,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 47,
      "baseline_mean": "35.14",
      "baseline_stddev": "4.45",
      "computed_on": "2025-03-22T16:52:40Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 83,
    "fields": {
      "entity": 11,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 36,
      "baseline_mean": "34.17",
      "baseline_stddev": "3.53",
      "computed_on": "2025-03-22T00:18:25Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 84,
    "fields": {
      "entity": 26,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 29,
      "baseline_mean": "32.51",
      "baseline_stddev": "5.20",
      "computed_on": "2025-05-04T00:20:26Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 85,
    "fields": {
      "entity": 11,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 29,
      "baseline_mean": "45.12",
      "baseline_stddev": "7.21",
      "computed_on": "2025-05-02T18:17:37Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 86,
    "fields": {
      "entity": 21,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 39,
      "baseline_mean": "31.24",
      "baseline_stddev": "3.60",
      "computed_on": "2025-01-27T14:13:24Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 87,
    "fields": {
      "entity": 27,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 36,
      "baseline_mean": "37.79",
      "baseline_stddev": "7.87",
      "computed_on": "2025-02-06T03:52:06Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 88,
    "fields": {
      "entity": 2,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 33,
      "baseline_mean": "21.65",
      "baseline_stddev": "5.31",
      "computed_on": "2025-05-09T03:11:24Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 89,
    "fields": {
      "entity": 17,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 26,
      "baseline_mean": "33.27",
      "baseline_stddev": "3.00",
      "computed_on": "2025-03-09T06:13:39Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 90,
    "fields": {
      "entity": 3,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 55,
      "baseline_mean": "33.73",
      "baseline_stddev": "4.64",
      "computed_on": "2025-01-29T01:26:00Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 91,
    "fields": {
      "entity": 17,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 44,
      "baseline_mean": "32.43",
      "baseline_stddev": "6.60",
      "computed_on": "2025-03-06T04:56:55Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 92,
    "fields": {
      "entity": 37,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 18,
      "baseline_mean": "42.06",
      "baseline_stddev": "5.96",
      "computed_on": "2025-04-20T20:06:11Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 93,
    "fields": {
      "entity": 27,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 45,
      "baseline_mean": "35.09",
      "baseline_stddev": "4.82",
      "computed_on": "2025-02-11T11:56:10Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 94,
    "fields": {
      "entity": 2,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 39,
      "baseline_mean": "35.90",
      "baseline_stddev": "6.88",
      "computed_on": "2025-04-28T08:15:27Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 95,
    "fields": {
      "entity": 14,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 18,
      "baseline_mean": "34.02",
      "baseline_stddev": "4.36",
      "computed_on": "2025-02-15T04:11:32Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 96,
    "fields": {
      "entity": 37,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 44,
      "baseline_mean": "55.62",
      "baseline_stddev": "4.46",
      "computed_on": "2025-04-18T16:01:14Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 97,
    "fields": {
      "entity": 9,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 41,
      "baseline_mean": "31.22",
      "baseline_stddev": "7.04",
      "computed_on": "2025-04-16T09:28:21Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 98,
    "fields": {
      "entity": 18,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 50,
      "baseline_mean": "39.59",
      "baseline_stddev": "6.53",
      "computed_on": "2025-03-21T16:52:47Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 99,
    "fields": {
      "entity": 8,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 26,
      "baseline_mean": "27.83",
      "baseline_stddev": "3.59",
      "computed_on": "2025-02-24T07:59:55Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 100,
    "fields": {
      "entity": 33,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 55,
      "baseline_mean": "27.75",
      "baseline_stddev": "4.70",
      "computed_on": "2025-02-25T09:04:36Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 101,
    "fields": {
      "entity": 1,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 39,
      "baseline_mean": "52.70",
      "baseline_stddev": "8.21",
      "computed_on": "2025-03-03T14:29:41Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 102,
    "fields": {
      "entity": 20,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 40,
      "baseline_mean": "25.02",
      "baseline_stddev": "3.88",
      "computed_on": "2025-03-14T03:43:14Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 103,
    "fields": {
      "entity": 13,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 29,
      "baseline_mean": "34.81",
      "baseline_stddev": "6.22",
      "computed_on": "2025-02-01T09:29:18Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 104,
    "fields": {
      "entity": 2,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 32,
      "baseline_mean": "27.59",
      "baseline_stddev": "8.27",
      "computed_on": "2025-04-11T12:24:27Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 105,
    "fields": {
      "entity": 8,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 22,
      "baseline_mean": "36.37",
      "baseline_stddev": "7.35",
      "computed_on": "2025-03-22T12:06:42Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 106,
    "fields": {
      "entity": 31,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 19,
      "baseline_mean": "48.16",
      "baseline_stddev": "3.58",
      "computed_on": "2025-04-30T02:03:07Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 107,
    "fields": {
      "entity": 30,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 54,
      "baseline_mean": "52.93",
      "baseline_stddev": "7.64",
      "computed_on": "2025-02-22T23:53:14Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 108,
    "fields": {
      "entity": 23,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 43,
      "baseline_mean": "52.02",
      "baseline_stddev": "4.88",
      "computed_on": "2025-04-23T10:16:40Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 109,
    "fields": {
      "entity": 36,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 54,
      "baseline_mean": "28.93",
      "baseline_stddev": "5.95",
      "computed_on": "2025-03-01T07:18:22Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 110,
    "fields": {
      "entity": 40,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 54,
      "baseline_mean": "41.43",
      "baseline_stddev": "8.80",
      "computed_on": "2025-03-08T00:09:45Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 111,
    "fields": {
      "entity": 22,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 30,
      "baseline_mean": "47.89",
      "baseline_stddev": "8.41",
      "computed_on": "2025-03-18T00:23:35Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 112,
    "fields": {
      "entity": 17,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 35,
      "baseline_mean": "41.70",
      "baseline_stddev": "4.92",
      "computed_on": "2025-03-09T02:28:07Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 113,
    "fields": {
      "entity": 40,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 57,
      "baseline_mean": "39.34",
      "baseline_stddev": "6.19",
      "computed_on": "2025-03-10T02:12:31Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 114,
    "fields": {
      "entity": 28,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 18,
      "baseline_mean": "42.22",
      "baseline_stddev": "4.98",
      "computed_on": "2025-01-17T03:10:06Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 115,
    "fields": {
      "entity": 7,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 50,
      "baseline_mean": "19.80",
      "baseline_stddev": "4.17",
      "computed_on": "2025-02-02T03:46:43Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 116,
    "fields": {
      "entity": 24,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 17,
      "baseline_mean": "33.82",
      "baseline_stddev": "6.10",
      "computed_on": "2025-04-20T14:21:13Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 117,
    "fields": {
      "entity": 22,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 32,
      "baseline_mean": "31.93",
      "baseline_stddev": "6.91",
      "computed_on": "2025-05-04T20:06:20Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 118,
    "fields": {
      "entity": 20,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 57,
      "baseline_mean": "39.43",
      "baseline_stddev": "5.98",
      "computed_on": "2025-02-05T01:38:14Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 119,
    "fields": {
      "entity": 32,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 33,
      "baseline_mean": "40.07",
      "baseline_stddev": "8.34",
      "computed_on": "2025-03-01T19:10:50Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 120,
    "fields": {
      "entity": 37,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 27,
      "baseline_mean": "27.30",
      "baseline_stddev": "6.75",
      "computed_on": "2025-04-25T05:49:13Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 121,
    "fields": {
      "entity": 27,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 17,
      "baseline_mean": "47.44",
      "baseline_stddev": "3.90",
      "computed_on": "2025-03-22T20:23:11Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 122,
    "fields": {
      "entity": 7,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 30,
      "baseline_mean": "34.55",
      "baseline_stddev": "8.23",
      "computed_on": "2025-03-05T04:11:27Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 123,
    "fields": {
      "entity": 24,
      "metric": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 31,
      "baseline_mean": "32.39",
      "baseline_stddev": "6.06",
      "computed_on": "2025-03-19T19:52:54Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 124,
    "fields": {
      "entity": 37,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 37,
      "baseline_mean": "41.21",
      "baseline_stddev": "8.09",
      "computed_on": "2025-03-16T12:03:56Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 125,
    "fields": {
      "entity": 15,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 38,
      "baseline_mean": "48.60",
      "baseline_stddev": "7.36",
      "computed_on": "2025-01-31T03:26:26Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 126,
    "fields": {
      "entity": 35,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 59,
      "baseline_mean": "38.27",
      "baseline_stddev": "3.29",
      "computed_on": "2025-02-24T11:28:09Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 127,
    "fields": {
      "entity": 16,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 17,
      "baseline_mean": "39.14",
      "baseline_stddev": "5.90",
      "computed_on": "2025-03-21T05:33:11Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 128,
    "fields": {
      "entity": 5,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 47,
      "baseline_mean": "36.70",
      "baseline_stddev": "8.88",
      "computed_on": "2025-03-02T06:43:47Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 129,
    "fields": {
      "entity": 31,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 27,
      "baseline_mean": "47.14",
      "baseline_stddev": "3.69",
      "computed_on": "2025-04-28T00:45:16Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 130,
    "fields": {
      "entity": 12,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 29,
      "baseline_mean": "46.54",
      "baseline_stddev": "5.21",
      "computed_on": "2025-03-07T00:29:30Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 131,
    "fields": {
      "entity": 4,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 58,
      "baseline_mean": "41.94",
      "baseline_stddev": "3.32",
      "computed_on": "2025-03-09T05:21:35Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 132,
    "fields": {
      "entity": 27,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 24,
      "baseline_mean": "37.96",
      "baseline_stddev": "4.69",
      "computed_on": "2025-03-01T18:00:51Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 133,
    "fields": {
      "entity": 39,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 44,
      "baseline_mean": "41.03",
      "baseline_stddev": "8.20",
      "computed_on": "2025-02-26T19:15:34Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 134,
    "fields": {
      "entity": 38,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 48,
      "baseline_mean": "47.29",
      "baseline_stddev": "7.94",
      "computed_on": "2025-01-29T03:33:52Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 135,
    "fields": {
      "entity": 9,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 28,
      "baseline_mean": "32.89",
      "baseline_stddev": "5.26",
      "computed_on": "2025-04-26T20:54:04Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 136,
    "fields": {
      "entity": 6,
      "metric": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 49,
      "baseline_mean": "33.91",
      "baseline_stddev": "6.69",
      "computed_on": "2025-03-08T12:06:13Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 137,
    "fields": {
      "entity": 5,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 46,
      "baseline_mean": "63.56",
      "baseline_stddev": "7.66",
      "computed_on": "2025-01-27T18:44:32Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 138,
    "fields": {
      "entity": 25,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 19,
      "baseline_mean": "35.15",
      "baseline_stddev": "3.71",
      "computed_on": "2025-04-14T23:01:37Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 139,
    "fields": {
      "entity": 17,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 38,
      "baseline_mean": "34.63",
      "baseline_stddev": "4.07",
      "computed_on": "2025-01-19T01:05:20Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 140,
    "fields": {
      "entity": 20,
      "metric": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 41,
      "baseline_mean": "52.16",
      "baseline_stddev": "5.98",
      "computed_on": "2025-03-11T22:34:54Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 141,
    "fields": {
      "entity": 23,
      "metric": 6,
      "metric_name": "privileged_commands",
      "training_days": 33,
      "baseline_mean": "53.45",
      "baseline_stddev": "4.83",
      "computed_on": "2025-05-04T13:54:39Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 142,
    "fields": {
      "entity": 6,
      "metric": 4,
      "metric_name": "failed_authentications",
      "training_days": 28,
      "baseline_mean": "37.68",
      "baseline_stddev": "6.37",
      "computed_on": "2025-03-24T19:14:42Z"
    }
  },
  {
    "model": "app.baseline",
    "pk": 143,
    "fields": {
      "entity": 11,
      "metric": 5,
      "metric_name": "after_hours_actions",
      "training_days": 28,
      "baseline_mean": "42.06",
      "baseline_stddev": "4.27",
      "computed_on": "2025-04-28T19:22:41Z"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 1,
    "fields": {
      "baseline": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": "31.24",
      "baseline_stddev": "3.60",
      "deviation": "5.81",
      "metric_value": "37.05",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 2,
    "fields": {
      "baseline": 21,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "44.88",
      "baseline_stddev": "5.51",
      "deviation": "-0.17",
      "metric_value": "44.71",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 3,
    "fields": {
      "baseline": 57,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "45.61",
      "baseline_stddev": "5.33",
      "deviation": "2.61",
      "metric_value": "48.22",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 4,
    "fields": {
      "baseline": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.03",
      "baseline_stddev": "8.20",
      "deviation": "4.47",
      "metric_value": "45.50",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 5,
    "fields": {
      "baseline": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": "24.25",
      "baseline_stddev": "3.09",
      "deviation": "7.67",
      "metric_value": "31.92",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 6,
    "fields": {
      "baseline": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": "30.46",
      "baseline_stddev": "4.78",
      "deviation": "-1.01",
      "metric_value": "29.45",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 7,
    "fields": {
      "baseline": 67,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "48.61",
      "baseline_stddev": "4.64",
      "deviation": "-19.78",
      "metric_value": "28.83",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 8,
    "fields": {
      "baseline": 106,
      "metric_name": "after_hours_actions",
      "baseline_mean": "48.16",
      "baseline_stddev": "3.58",
      "deviation": "3.74",
      "metric_value": "51.90",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 9,
    "fields": {
      "baseline": 20,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "25.44",
      "baseline_stddev": "7.26",
      "deviation": "12.24",
      "metric_value": "37.68",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 10,
    "fields": {
      "baseline": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "46.52",
      "baseline_stddev": "3.93",
      "deviation": "-11.62",
      "metric_value": "34.90",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 11,
    "fields": {
      "baseline": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": "34.63",
      "baseline_stddev": "4.07",
      "deviation": "-0.29",
      "metric_value": "34.34",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 12,
    "fields": {
      "baseline": 71,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "45.63",
      "baseline_stddev": "8.74",
      "deviation": "4.31",
      "metric_value": "49.94",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 13,
    "fields": {
      "baseline": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": "45.12",
      "baseline_stddev": "7.21",
      "deviation": "-14.84",
      "metric_value": "30.28",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 14,
    "fields": {
      "baseline": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": "53.84",
      "baseline_stddev": "5.26",
      "deviation": "-7.90",
      "metric_value": "45.94",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 15,
    "fields": {
      "baseline": 28,
      "metric_name": "after_hours_actions",
      "baseline_mean": "31.73",
      "baseline_stddev": "7.70",
      "deviation": "2.62",
      "metric_value": "34.35",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 16,
    "fields": {
      "baseline": 136,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "33.91",
      "baseline_stddev": "6.69",
      "deviation": "15.40",
      "metric_value": "49.31",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 17,
    "fields": {
      "baseline": 119,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "40.07",
      "baseline_stddev": "8.34",
      "deviation": "8.03",
      "metric_value": "48.10",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 18,
    "fields": {
      "baseline": 75,
      "metric_name": "privileged_commands",
      "baseline_mean": "22.05",
      "baseline_stddev": "6.18",
      "deviation": "-1.15",
      "metric_value": "20.90",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 19,
    "fields": {
      "baseline": 29,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.00",
      "baseline_stddev": "4.99",
      "deviation": "-0.36",
      "metric_value": "51.64",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 20,
    "fields": {
      "baseline": 72,
      "metric_name": "after_hours_actions",
      "baseline_mean": "42.65",
      "baseline_stddev": "5.51",
      "deviation": "14.54",
      "metric_value": "57.19",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 21,
    "fields": {
      "baseline": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": "33.82",
      "baseline_stddev": "6.10",
      "deviation": "2.82",
      "metric_value": "36.64",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 22,
    "fields": {
      "baseline": 105,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "36.37",
      "baseline_stddev": "7.35",
      "deviation": "0.02",
      "metric_value": "36.39",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 23,
    "fields": {
      "baseline": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": "45.12",
      "baseline_stddev": "7.21",
      "deviation": "-4.11",
      "metric_value": "41.01",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 24,
    "fields": {
      "baseline": 20,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "25.44",
      "baseline_stddev": "7.26",
      "deviation": "7.16",
      "metric_value": "32.60",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 25,
    "fields": {
      "baseline": 55,
      "metric_name": "failed_authentications",
      "baseline_mean": "37.02",
      "baseline_stddev": "4.74",
      "deviation": "-1.78",
      "metric_value": "35.24",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 26,
    "fields": {
      "baseline": 43,
      "metric_name": "after_hours_actions",
      "baseline_mean": "39.67",
      "baseline_stddev": "8.45",
      "deviation": "-4.79",
      "metric_value": "34.88",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 27,
    "fields": {
      "baseline": 118,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "39.43",
      "baseline_stddev": "5.98",
      "deviation": "5.37",
      "metric_value": "44.80",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 28,
    "fields": {
      "baseline": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "36.23",
      "baseline_stddev": "6.56",
      "deviation": "0.90",
      "metric_value": "37.13",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 29,
    "fields": {
      "baseline": 104,
      "metric_name": "after_hours_actions",
      "baseline_mean": "27.59",
      "baseline_stddev": "8.27",
      "deviation": "-2.80",
      "metric_value": "24.79",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 30,
    "fields": {
      "baseline": 28,
      "metric_name": "after_hours_actions",
      "baseline_mean": "31.73",
      "baseline_stddev": "7.70",
      "deviation": "9.60",
      "metric_value": "41.33",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 31,
    "fields": {
      "baseline": 113,
      "metric_name": "after_hours_actions",
      "baseline_mean": "39.34",
      "baseline_stddev": "6.19",
      "deviation": "-8.00",
      "metric_value": "31.34",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 32,
    "fields": {
      "baseline": 115,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "19.80",
      "baseline_stddev": "4.17",
      "deviation": "-6.22",
      "metric_value": "13.58",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 33,
    "fields": {
      "baseline": 130,
      "metric_name": "failed_authentications",
      "baseline_mean": "46.54",
      "baseline_stddev": "5.21",
      "deviation": "4.73",
      "metric_value": "51.27",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 34,
    "fields": {
      "baseline": 60,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.83",
      "baseline_stddev": "3.27",
      "deviation": "11.26",
      "metric_value": "59.09",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 35,
    "fields": {
      "baseline": 62,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "34.58",
      "baseline_stddev": "4.26",
      "deviation": "-0.16",
      "metric_value": "34.42",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 36,
    "fields": {
      "baseline": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "37.89",
      "baseline_stddev": "4.48",
      "deviation": "-12.15",
      "metric_value": "25.74",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 37,
    "fields": {
      "baseline": 28,
      "metric_name": "after_hours_actions",
      "baseline_mean": "31.73",
      "baseline_stddev": "7.70",
      "deviation": "3.13",
      "metric_value": "34.86",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 38,
    "fields": {
      "baseline": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": "40.23",
      "baseline_stddev": "3.26",
      "deviation": "3.63",
      "metric_value": "43.86",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 39,
    "fields": {
      "baseline": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "30.32",
      "baseline_stddev": "5.52",
      "deviation": "-11.38",
      "metric_value": "18.94",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 40,
    "fields": {
      "baseline": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": "53.84",
      "baseline_stddev": "5.26",
      "deviation": "-12.31",
      "metric_value": "41.53",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 41,
    "fields": {
      "baseline": 19,
      "metric_name": "after_hours_actions",
      "baseline_mean": "52.60",
      "baseline_stddev": "3.78",
      "deviation": "2.29",
      "metric_value": "54.89",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 42,
    "fields": {
      "baseline": 91,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "32.43",
      "baseline_stddev": "6.60",
      "deviation": "-5.36",
      "metric_value": "27.07",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 43,
    "fields": {
      "baseline": 47,
      "metric_name": "after_hours_actions",
      "baseline_mean": "37.08",
      "baseline_stddev": "5.21",
      "deviation": "2.28",
      "metric_value": "39.36",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 44,
    "fields": {
      "baseline": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "27.75",
      "baseline_stddev": "4.70",
      "deviation": "0.60",
      "metric_value": "28.35",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 45,
    "fields": {
      "baseline": 63,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "31.54",
      "baseline_stddev": "8.17",
      "deviation": "-3.17",
      "metric_value": "28.37",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 46,
    "fields": {
      "baseline": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.14",
      "baseline_stddev": "3.69",
      "deviation": "-4.89",
      "metric_value": "42.25",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 47,
    "fields": {
      "baseline": 68,
      "metric_name": "failed_authentications",
      "baseline_mean": "33.67",
      "baseline_stddev": "8.84",
      "deviation": "-6.78",
      "metric_value": "26.89",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 48,
    "fields": {
      "baseline": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.17",
      "baseline_stddev": "3.53",
      "deviation": "6.56",
      "metric_value": "40.73",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 49,
    "fields": {
      "baseline": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": "53.84",
      "baseline_stddev": "5.26",
      "deviation": "2.84",
      "metric_value": "56.68",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 50,
    "fields": {
      "baseline": 7,
      "metric_name": "privileged_commands",
      "baseline_mean": "28.55",
      "baseline_stddev": "7.85",
      "deviation": "3.85",
      "metric_value": "32.40",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 51,
    "fields": {
      "baseline": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.14",
      "baseline_stddev": "3.69",
      "deviation": "6.31",
      "metric_value": "53.45",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 52,
    "fields": {
      "baseline": 142,
      "metric_name": "failed_authentications",
      "baseline_mean": "37.68",
      "baseline_stddev": "6.37",
      "deviation": "-4.65",
      "metric_value": "33.03",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 53,
    "fields": {
      "baseline": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "36.23",
      "baseline_stddev": "6.56",
      "deviation": "-1.42",
      "metric_value": "34.81",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 54,
    "fields": {
      "baseline": 134,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.29",
      "baseline_stddev": "7.94",
      "deviation": "-5.13",
      "metric_value": "42.16",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 55,
    "fields": {
      "baseline": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": "38.01",
      "baseline_stddev": "7.08",
      "deviation": "1.94",
      "metric_value": "39.95",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 56,
    "fields": {
      "baseline": 75,
      "metric_name": "privileged_commands",
      "baseline_mean": "22.05",
      "baseline_stddev": "6.18",
      "deviation": "-9.93",
      "metric_value": "12.12",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 57,
    "fields": {
      "baseline": 113,
      "metric_name": "after_hours_actions",
      "baseline_mean": "39.34",
      "baseline_stddev": "6.19",
      "deviation": "5.01",
      "metric_value": "44.35",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 58,
    "fields": {
      "baseline": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "48.60",
      "baseline_stddev": "7.36",
      "deviation": "-13.15",
      "metric_value": "35.45",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 59,
    "fields": {
      "baseline": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "27.75",
      "baseline_stddev": "4.70",
      "deviation": "-9.32",
      "metric_value": "18.43",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 60,
    "fields": {
      "baseline": 123,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "32.39",
      "baseline_stddev": "6.06",
      "deviation": "-1.01",
      "metric_value": "31.38",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 61,
    "fields": {
      "baseline": 68,
      "metric_name": "failed_authentications",
      "baseline_mean": "33.67",
      "baseline_stddev": "8.84",
      "deviation": "0.34",
      "metric_value": "34.01",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 62,
    "fields": {
      "baseline": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": "63.56",
      "baseline_stddev": "7.66",
      "deviation": "-3.42",
      "metric_value": "60.14",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 63,
    "fields": {
      "baseline": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "42.87",
      "baseline_stddev": "5.14",
      "deviation": "3.45",
      "metric_value": "46.32",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 64,
    "fields": {
      "baseline": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": "45.12",
      "baseline_stddev": "7.21",
      "deviation": "-6.12",
      "metric_value": "39.00",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 65,
    "fields": {
      "baseline": 113,
      "metric_name": "after_hours_actions",
      "baseline_mean": "39.34",
      "baseline_stddev": "6.19",
      "deviation": "-1.06",
      "metric_value": "38.28",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 66,
    "fields": {
      "baseline": 82,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.14",
      "baseline_stddev": "4.45",
      "deviation": "17.65",
      "metric_value": "52.79",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 67,
    "fields": {
      "baseline": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.89",
      "baseline_stddev": "8.41",
      "deviation": "-1.92",
      "metric_value": "45.97",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 68,
    "fields": {
      "baseline": 44,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "59.76",
      "baseline_stddev": "4.32",
      "deviation": "-7.26",
      "metric_value": "52.50",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 69,
    "fields": {
      "baseline": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "42.87",
      "baseline_stddev": "5.14",
      "deviation": "4.83",
      "metric_value": "47.70",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 70,
    "fields": {
      "baseline": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "38.29",
      "baseline_stddev": "4.56",
      "deviation": "-1.26",
      "metric_value": "37.03",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 71,
    "fields": {
      "baseline": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.74",
      "baseline_stddev": "3.99",
      "deviation": "-8.24",
      "metric_value": "27.50",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 72,
    "fields": {
      "baseline": 40,
      "metric_name": "after_hours_actions",
      "baseline_mean": "45.77",
      "baseline_stddev": "8.30",
      "deviation": "3.78",
      "metric_value": "49.55",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 73,
    "fields": {
      "baseline": 24,
      "metric_name": "privileged_commands",
      "baseline_mean": "50.31",
      "baseline_stddev": "4.67",
      "deviation": "-8.02",
      "metric_value": "42.29",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 74,
    "fields": {
      "baseline": 121,
      "metric_name": "after_hours_actions",
      "baseline_mean": "47.44",
      "baseline_stddev": "3.90",
      "deviation": "-15.90",
      "metric_value": "31.54",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 75,
    "fields": {
      "baseline": 28,
      "metric_name": "after_hours_actions",
      "baseline_mean": "31.73",
      "baseline_stddev": "7.70",
      "deviation": "3.79",
      "metric_value": "35.52",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 76,
    "fields": {
      "baseline": 28,
      "metric_name": "after_hours_actions",
      "baseline_mean": "31.73",
      "baseline_stddev": "7.70",
      "deviation": "-7.62",
      "metric_value": "24.11",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 77,
    "fields": {
      "baseline": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": "37.96",
      "baseline_stddev": "4.69",
      "deviation": "-5.09",
      "metric_value": "32.87",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 78,
    "fields": {
      "baseline": 70,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "42.29",
      "baseline_stddev": "6.47",
      "deviation": "1.63",
      "metric_value": "43.92",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 79,
    "fields": {
      "baseline": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.89",
      "baseline_stddev": "5.26",
      "deviation": "-0.92",
      "metric_value": "31.97",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 80,
    "fields": {
      "baseline": 33,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "32.15",
      "baseline_stddev": "6.52",
      "deviation": "-0.81",
      "metric_value": "31.34",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 81,
    "fields": {
      "baseline": 48,
      "metric_name": "failed_authentications",
      "baseline_mean": "48.10",
      "baseline_stddev": "7.35",
      "deviation": "-5.41",
      "metric_value": "42.69",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 82,
    "fields": {
      "baseline": 88,
      "metric_name": "privileged_commands",
      "baseline_mean": "21.65",
      "baseline_stddev": "5.31",
      "deviation": "-6.89",
      "metric_value": "14.76",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 83,
    "fields": {
      "baseline": 57,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "45.61",
      "baseline_stddev": "5.33",
      "deviation": "-5.29",
      "metric_value": "40.32",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 84,
    "fields": {
      "baseline": 56,
      "metric_name": "privileged_commands",
      "baseline_mean": "40.15",
      "baseline_stddev": "7.54",
      "deviation": "1.30",
      "metric_value": "41.45",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 85,
    "fields": {
      "baseline": 122,
      "metric_name": "after_hours_actions",
      "baseline_mean": "34.55",
      "baseline_stddev": "8.23",
      "deviation": "-18.58",
      "metric_value": "15.97",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 86,
    "fields": {
      "baseline": 63,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "31.54",
      "baseline_stddev": "8.17",
      "deviation": "5.16",
      "metric_value": "36.70",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 87,
    "fields": {
      "baseline": 65,
      "metric_name": "after_hours_actions",
      "baseline_mean": "47.99",
      "baseline_stddev": "3.71",
      "deviation": "-13.96",
      "metric_value": "34.03",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 88,
    "fields": {
      "baseline": 48,
      "metric_name": "failed_authentications",
      "baseline_mean": "48.10",
      "baseline_stddev": "7.35",
      "deviation": "-7.50",
      "metric_value": "40.60",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 89,
    "fields": {
      "baseline": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "46.52",
      "baseline_stddev": "3.93",
      "deviation": "3.25",
      "metric_value": "49.77",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 90,
    "fields": {
      "baseline": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": "61.90",
      "baseline_stddev": "3.17",
      "deviation": "-4.67",
      "metric_value": "57.23",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 91,
    "fields": {
      "baseline": 49,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "37.40",
      "baseline_stddev": "4.51",
      "deviation": "-10.19",
      "metric_value": "27.21",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 92,
    "fields": {
      "baseline": 56,
      "metric_name": "privileged_commands",
      "baseline_mean": "40.15",
      "baseline_stddev": "7.54",
      "deviation": "-1.53",
      "metric_value": "38.62",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 93,
    "fields": {
      "baseline": 33,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "32.15",
      "baseline_stddev": "6.52",
      "deviation": "13.02",
      "metric_value": "45.17",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 94,
    "fields": {
      "baseline": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": "30.46",
      "baseline_stddev": "4.78",
      "deviation": "7.63",
      "metric_value": "38.09",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 95,
    "fields": {
      "baseline": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.51",
      "baseline_stddev": "5.20",
      "deviation": "2.05",
      "metric_value": "34.56",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 96,
    "fields": {
      "baseline": 72,
      "metric_name": "after_hours_actions",
      "baseline_mean": "42.65",
      "baseline_stddev": "5.51",
      "deviation": "-8.28",
      "metric_value": "34.37",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 97,
    "fields": {
      "baseline": 43,
      "metric_name": "after_hours_actions",
      "baseline_mean": "39.67",
      "baseline_stddev": "8.45",
      "deviation": "-6.06",
      "metric_value": "33.61",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 98,
    "fields": {
      "baseline": 97,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "31.22",
      "baseline_stddev": "7.04",
      "deviation": "1.02",
      "metric_value": "32.24",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 99,
    "fields": {
      "baseline": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": "30.46",
      "baseline_stddev": "4.78",
      "deviation": "-0.22",
      "metric_value": "30.24",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 100,
    "fields": {
      "baseline": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "37.89",
      "baseline_stddev": "4.48",
      "deviation": "5.61",
      "metric_value": "43.50",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 101,
    "fields": {
      "baseline": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": "35.15",
      "baseline_stddev": "3.71",
      "deviation": "-3.22",
      "metric_value": "31.93",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 102,
    "fields": {
      "baseline": 7,
      "metric_name": "privileged_commands",
      "baseline_mean": "28.55",
      "baseline_stddev": "7.85",
      "deviation": "-13.32",
      "metric_value": "15.23",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 103,
    "fields": {
      "baseline": 12,
      "metric_name": "privileged_commands",
      "baseline_mean": "44.31",
      "baseline_stddev": "6.55",
      "deviation": "4.94",
      "metric_value": "49.25",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 104,
    "fields": {
      "baseline": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": "61.90",
      "baseline_stddev": "3.17",
      "deviation": "-4.11",
      "metric_value": "57.79",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 105,
    "fields": {
      "baseline": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "46.52",
      "baseline_stddev": "3.93",
      "deviation": "-10.91",
      "metric_value": "35.61",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 106,
    "fields": {
      "baseline": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "28.93",
      "baseline_stddev": "5.95",
      "deviation": "-7.37",
      "metric_value": "21.56",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 107,
    "fields": {
      "baseline": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "33.73",
      "baseline_stddev": "4.64",
      "deviation": "11.79",
      "metric_value": "45.52",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 108,
    "fields": {
      "baseline": 14,
      "metric_name": "privileged_commands",
      "baseline_mean": "46.78",
      "baseline_stddev": "5.64",
      "deviation": "4.07",
      "metric_value": "50.85",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 109,
    "fields": {
      "baseline": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "30.32",
      "baseline_stddev": "5.52",
      "deviation": "-13.18",
      "metric_value": "17.14",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 110,
    "fields": {
      "baseline": 62,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "34.58",
      "baseline_stddev": "4.26",
      "deviation": "9.46",
      "metric_value": "44.04",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 111,
    "fields": {
      "baseline": 26,
      "metric_name": "after_hours_actions",
      "baseline_mean": "16.89",
      "baseline_stddev": "7.02",
      "deviation": "-3.31",
      "metric_value": "13.58",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 112,
    "fields": {
      "baseline": 3,
      "metric_name": "failed_authentications",
      "baseline_mean": "54.01",
      "baseline_stddev": "8.84",
      "deviation": "3.86",
      "metric_value": "57.87",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 113,
    "fields": {
      "baseline": 104,
      "metric_name": "after_hours_actions",
      "baseline_mean": "27.59",
      "baseline_stddev": "8.27",
      "deviation": "-8.54",
      "metric_value": "19.05",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 114,
    "fields": {
      "baseline": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": "24.25",
      "baseline_stddev": "3.09",
      "deviation": "-1.26",
      "metric_value": "22.99",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 115,
    "fields": {
      "baseline": 93,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.09",
      "baseline_stddev": "4.82",
      "deviation": "2.60",
      "metric_value": "37.69",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 116,
    "fields": {
      "baseline": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "30.32",
      "baseline_stddev": "5.52",
      "deviation": "-0.72",
      "metric_value": "29.60",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 117,
    "fields": {
      "baseline": 43,
      "metric_name": "after_hours_actions",
      "baseline_mean": "39.67",
      "baseline_stddev": "8.45",
      "deviation": "2.65",
      "metric_value": "42.32",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 118,
    "fields": {
      "baseline": 71,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "45.63",
      "baseline_stddev": "8.74",
      "deviation": "-4.89",
      "metric_value": "40.74",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 119,
    "fields": {
      "baseline": 4,
      "metric_name": "privileged_commands",
      "baseline_mean": "27.18",
      "baseline_stddev": "6.73",
      "deviation": "-7.17",
      "metric_value": "20.01",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 120,
    "fields": {
      "baseline": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": "40.23",
      "baseline_stddev": "3.26",
      "deviation": "-4.17",
      "metric_value": "36.06",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 121,
    "fields": {
      "baseline": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "33.73",
      "baseline_stddev": "4.64",
      "deviation": "11.97",
      "metric_value": "45.70",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 122,
    "fields": {
      "baseline": 35,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "36.56",
      "baseline_stddev": "6.43",
      "deviation": "-6.68",
      "metric_value": "29.88",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 123,
    "fields": {
      "baseline": 20,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "25.44",
      "baseline_stddev": "7.26",
      "deviation": "2.98",
      "metric_value": "28.42",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 124,
    "fields": {
      "baseline": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": "63.56",
      "baseline_stddev": "7.66",
      "deviation": "-4.97",
      "metric_value": "58.59",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 125,
    "fields": {
      "baseline": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "33.73",
      "baseline_stddev": "4.64",
      "deviation": "-12.82",
      "metric_value": "20.91",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 126,
    "fields": {
      "baseline": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "48.60",
      "baseline_stddev": "7.36",
      "deviation": "-0.37",
      "metric_value": "48.23",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 127,
    "fields": {
      "baseline": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": "46.49",
      "baseline_stddev": "3.50",
      "deviation": "-4.20",
      "metric_value": "42.29",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 128,
    "fields": {
      "baseline": 24,
      "metric_name": "privileged_commands",
      "baseline_mean": "50.31",
      "baseline_stddev": "4.67",
      "deviation": "-3.63",
      "metric_value": "46.68",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 129,
    "fields": {
      "baseline": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.89",
      "baseline_stddev": "5.26",
      "deviation": "5.32",
      "metric_value": "38.21",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 130,
    "fields": {
      "baseline": 47,
      "metric_name": "after_hours_actions",
      "baseline_mean": "37.08",
      "baseline_stddev": "5.21",
      "deviation": "-2.25",
      "metric_value": "34.83",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 131,
    "fields": {
      "baseline": 50,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "49.01",
      "baseline_stddev": "6.94",
      "deviation": "-4.45",
      "metric_value": "44.56",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 132,
    "fields": {
      "baseline": 79,
      "metric_name": "after_hours_actions",
      "baseline_mean": "52.50",
      "baseline_stddev": "5.32",
      "deviation": "4.57",
      "metric_value": "57.07",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 133,
    "fields": {
      "baseline": 32,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "40.12",
      "baseline_stddev": "5.36",
      "deviation": "2.51",
      "metric_value": "42.63",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 134,
    "fields": {
      "baseline": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.22",
      "baseline_stddev": "4.98",
      "deviation": "6.07",
      "metric_value": "48.29",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 135,
    "fields": {
      "baseline": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": "35.15",
      "baseline_stddev": "3.71",
      "deviation": "-2.68",
      "metric_value": "32.47",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 136,
    "fields": {
      "baseline": 9,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "26.84",
      "baseline_stddev": "3.25",
      "deviation": "1.79",
      "metric_value": "28.63",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 137,
    "fields": {
      "baseline": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "25.55",
      "baseline_stddev": "6.65",
      "deviation": "-5.48",
      "metric_value": "20.07",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 138,
    "fields": {
      "baseline": 70,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "42.29",
      "baseline_stddev": "6.47",
      "deviation": "-0.72",
      "metric_value": "41.57",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 139,
    "fields": {
      "baseline": 25,
      "metric_name": "after_hours_actions",
      "baseline_mean": "43.96",
      "baseline_stddev": "4.00",
      "deviation": "-3.70",
      "metric_value": "40.26",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 140,
    "fields": {
      "baseline": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.51",
      "baseline_stddev": "5.20",
      "deviation": "-2.82",
      "metric_value": "29.69",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 141,
    "fields": {
      "baseline": 88,
      "metric_name": "privileged_commands",
      "baseline_mean": "21.65",
      "baseline_stddev": "5.31",
      "deviation": "-7.51",
      "metric_value": "14.14",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 142,
    "fields": {
      "baseline": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": "61.90",
      "baseline_stddev": "3.17",
      "deviation": "10.44",
      "metric_value": "72.34",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 143,
    "fields": {
      "baseline": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": "24.25",
      "baseline_stddev": "3.09",
      "deviation": "16.62",
      "metric_value": "40.87",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 144,
    "fields": {
      "baseline": 89,
      "metric_name": "after_hours_actions",
      "baseline_mean": "33.27",
      "baseline_stddev": "3.00",
      "deviation": "7.32",
      "metric_value": "40.59",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 145,
    "fields": {
      "baseline": 98,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "39.59",
      "baseline_stddev": "6.53",
      "deviation": "11.22",
      "metric_value": "50.81",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 146,
    "fields": {
      "baseline": 91,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "32.43",
      "baseline_stddev": "6.60",
      "deviation": "-10.50",
      "metric_value": "21.93",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 147,
    "fields": {
      "baseline": 106,
      "metric_name": "after_hours_actions",
      "baseline_mean": "48.16",
      "baseline_stddev": "3.58",
      "deviation": "-5.01",
      "metric_value": "43.15",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 148,
    "fields": {
      "baseline": 19,
      "metric_name": "after_hours_actions",
      "baseline_mean": "52.60",
      "baseline_stddev": "3.78",
      "deviation": "3.66",
      "metric_value": "56.26",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 149,
    "fields": {
      "baseline": 79,
      "metric_name": "after_hours_actions",
      "baseline_mean": "52.50",
      "baseline_stddev": "5.32",
      "deviation": "10.40",
      "metric_value": "62.90",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 150,
    "fields": {
      "baseline": 66,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "33.35",
      "baseline_stddev": "3.50",
      "deviation": "-4.71",
      "metric_value": "28.64",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 151,
    "fields": {
      "baseline": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.51",
      "baseline_stddev": "5.20",
      "deviation": "3.10",
      "metric_value": "35.61",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 152,
    "fields": {
      "baseline": 2,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.77",
      "baseline_stddev": "8.91",
      "deviation": "0.74",
      "metric_value": "48.51",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 153,
    "fields": {
      "baseline": 81,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "29.58",
      "baseline_stddev": "7.02",
      "deviation": "1.07",
      "metric_value": "30.65",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 154,
    "fields": {
      "baseline": 33,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "32.15",
      "baseline_stddev": "6.52",
      "deviation": "-3.26",
      "metric_value": "28.89",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 155,
    "fields": {
      "baseline": 75,
      "metric_name": "privileged_commands",
      "baseline_mean": "22.05",
      "baseline_stddev": "6.18",
      "deviation": "1.28",
      "metric_value": "23.33",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 156,
    "fields": {
      "baseline": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "27.30",
      "baseline_stddev": "6.75",
      "deviation": "0.86",
      "metric_value": "28.16",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 157,
    "fields": {
      "baseline": 71,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "45.63",
      "baseline_stddev": "8.74",
      "deviation": "-8.41",
      "metric_value": "37.22",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 158,
    "fields": {
      "baseline": 5,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "22.54",
      "baseline_stddev": "5.73",
      "deviation": "0.92",
      "metric_value": "23.46",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 159,
    "fields": {
      "baseline": 64,
      "metric_name": "privileged_commands",
      "baseline_mean": "35.69",
      "baseline_stddev": "7.14",
      "deviation": "3.83",
      "metric_value": "39.52",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 160,
    "fields": {
      "baseline": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.17",
      "baseline_stddev": "3.53",
      "deviation": "1.80",
      "metric_value": "35.97",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 161,
    "fields": {
      "baseline": 15,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "42.09",
      "baseline_stddev": "7.79",
      "deviation": "6.28",
      "metric_value": "48.37",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 162,
    "fields": {
      "baseline": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": "46.49",
      "baseline_stddev": "3.50",
      "deviation": "-6.75",
      "metric_value": "39.74",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 163,
    "fields": {
      "baseline": 107,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.93",
      "baseline_stddev": "7.64",
      "deviation": "-2.26",
      "metric_value": "50.67",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 164,
    "fields": {
      "baseline": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": "38.01",
      "baseline_stddev": "7.08",
      "deviation": "5.87",
      "metric_value": "43.88",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 165,
    "fields": {
      "baseline": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": "63.56",
      "baseline_stddev": "7.66",
      "deviation": "-0.54",
      "metric_value": "63.02",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 166,
    "fields": {
      "baseline": 45,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "32.31",
      "baseline_stddev": "3.18",
      "deviation": "-1.63",
      "metric_value": "30.68",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 167,
    "fields": {
      "baseline": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": "38.27",
      "baseline_stddev": "3.29",
      "deviation": "4.18",
      "metric_value": "42.45",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 168,
    "fields": {
      "baseline": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.70",
      "baseline_stddev": "4.92",
      "deviation": "12.82",
      "metric_value": "54.52",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 169,
    "fields": {
      "baseline": 57,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "45.61",
      "baseline_stddev": "5.33",
      "deviation": "-5.46",
      "metric_value": "40.15",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 170,
    "fields": {
      "baseline": 2,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.77",
      "baseline_stddev": "8.91",
      "deviation": "1.22",
      "metric_value": "48.99",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 171,
    "fields": {
      "baseline": 60,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.83",
      "baseline_stddev": "3.27",
      "deviation": "4.98",
      "metric_value": "52.81",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 172,
    "fields": {
      "baseline": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.89",
      "baseline_stddev": "8.41",
      "deviation": "-6.22",
      "metric_value": "41.67",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 173,
    "fields": {
      "baseline": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.43",
      "baseline_stddev": "8.80",
      "deviation": "-10.82",
      "metric_value": "30.61",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 174,
    "fields": {
      "baseline": 89,
      "metric_name": "after_hours_actions",
      "baseline_mean": "33.27",
      "baseline_stddev": "3.00",
      "deviation": "-3.22",
      "metric_value": "30.05",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 175,
    "fields": {
      "baseline": 9,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "26.84",
      "baseline_stddev": "3.25",
      "deviation": "12.61",
      "metric_value": "39.45",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 176,
    "fields": {
      "baseline": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": "38.01",
      "baseline_stddev": "7.08",
      "deviation": "6.58",
      "metric_value": "44.59",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 177,
    "fields": {
      "baseline": 91,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "32.43",
      "baseline_stddev": "6.60",
      "deviation": "4.48",
      "metric_value": "36.91",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 178,
    "fields": {
      "baseline": 64,
      "metric_name": "privileged_commands",
      "baseline_mean": "35.69",
      "baseline_stddev": "7.14",
      "deviation": "10.21",
      "metric_value": "45.90",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 179,
    "fields": {
      "baseline": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "46.52",
      "baseline_stddev": "3.93",
      "deviation": "2.26",
      "metric_value": "48.78",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 180,
    "fields": {
      "baseline": 113,
      "metric_name": "after_hours_actions",
      "baseline_mean": "39.34",
      "baseline_stddev": "6.19",
      "deviation": "-11.96",
      "metric_value": "27.38",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 181,
    "fields": {
      "baseline": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.22",
      "baseline_stddev": "4.98",
      "deviation": "0.78",
      "metric_value": "43.00",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 182,
    "fields": {
      "baseline": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "55.56",
      "baseline_stddev": "8.65",
      "deviation": "-2.11",
      "metric_value": "53.45",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 183,
    "fields": {
      "baseline": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.43",
      "baseline_stddev": "8.80",
      "deviation": "-2.07",
      "metric_value": "39.36",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 184,
    "fields": {
      "baseline": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": "31.24",
      "baseline_stddev": "3.60",
      "deviation": "1.36",
      "metric_value": "32.60",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 185,
    "fields": {
      "baseline": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.73",
      "baseline_stddev": "7.79",
      "deviation": "-2.15",
      "metric_value": "45.58",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 186,
    "fields": {
      "baseline": 35,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "36.56",
      "baseline_stddev": "6.43",
      "deviation": "10.79",
      "metric_value": "47.35",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 187,
    "fields": {
      "baseline": 104,
      "metric_name": "after_hours_actions",
      "baseline_mean": "27.59",
      "baseline_stddev": "8.27",
      "deviation": "-1.02",
      "metric_value": "26.57",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 188,
    "fields": {
      "baseline": 3,
      "metric_name": "failed_authentications",
      "baseline_mean": "54.01",
      "baseline_stddev": "8.84",
      "deviation": "-10.83",
      "metric_value": "43.18",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 189,
    "fields": {
      "baseline": 102,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "25.02",
      "baseline_stddev": "3.88",
      "deviation": "2.89",
      "metric_value": "27.91",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 190,
    "fields": {
      "baseline": 76,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "48.32",
      "baseline_stddev": "5.99",
      "deviation": "-12.77",
      "metric_value": "35.55",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 191,
    "fields": {
      "baseline": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "48.60",
      "baseline_stddev": "7.36",
      "deviation": "-2.69",
      "metric_value": "45.91",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 192,
    "fields": {
      "baseline": 63,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "31.54",
      "baseline_stddev": "8.17",
      "deviation": "5.04",
      "metric_value": "36.58",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 193,
    "fields": {
      "baseline": 4,
      "metric_name": "privileged_commands",
      "baseline_mean": "27.18",
      "baseline_stddev": "6.73",
      "deviation": "15.88",
      "metric_value": "43.06",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 194,
    "fields": {
      "baseline": 41,
      "metric_name": "privileged_commands",
      "baseline_mean": "32.62",
      "baseline_stddev": "7.61",
      "deviation": "11.57",
      "metric_value": "44.19",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 195,
    "fields": {
      "baseline": 134,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.29",
      "baseline_stddev": "7.94",
      "deviation": "16.57",
      "metric_value": "63.86",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 196,
    "fields": {
      "baseline": 5,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "22.54",
      "baseline_stddev": "5.73",
      "deviation": "-6.46",
      "metric_value": "16.08",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 197,
    "fields": {
      "baseline": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "48.60",
      "baseline_stddev": "7.36",
      "deviation": "-6.44",
      "metric_value": "42.16",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 198,
    "fields": {
      "baseline": 98,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "39.59",
      "baseline_stddev": "6.53",
      "deviation": "-3.47",
      "metric_value": "36.12",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 199,
    "fields": {
      "baseline": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": "48.48",
      "baseline_stddev": "5.35",
      "deviation": "0.39",
      "metric_value": "48.87",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 200,
    "fields": {
      "baseline": 21,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "44.88",
      "baseline_stddev": "5.51",
      "deviation": "-15.16",
      "metric_value": "29.72",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 201,
    "fields": {
      "baseline": 25,
      "metric_name": "after_hours_actions",
      "baseline_mean": "43.96",
      "baseline_stddev": "4.00",
      "deviation": "2.78",
      "metric_value": "46.74",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 202,
    "fields": {
      "baseline": 72,
      "metric_name": "after_hours_actions",
      "baseline_mean": "42.65",
      "baseline_stddev": "5.51",
      "deviation": "1.90",
      "metric_value": "44.55",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 203,
    "fields": {
      "baseline": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "51.31",
      "baseline_stddev": "5.50",
      "deviation": "5.91",
      "metric_value": "57.22",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 204,
    "fields": {
      "baseline": 97,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "31.22",
      "baseline_stddev": "7.04",
      "deviation": "-2.84",
      "metric_value": "28.38",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 205,
    "fields": {
      "baseline": 75,
      "metric_name": "privileged_commands",
      "baseline_mean": "22.05",
      "baseline_stddev": "6.18",
      "deviation": "-14.22",
      "metric_value": "7.83",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 206,
    "fields": {
      "baseline": 40,
      "metric_name": "after_hours_actions",
      "baseline_mean": "45.77",
      "baseline_stddev": "8.30",
      "deviation": "1.76",
      "metric_value": "47.53",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 207,
    "fields": {
      "baseline": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "33.73",
      "baseline_stddev": "4.64",
      "deviation": "5.79",
      "metric_value": "39.52",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 208,
    "fields": {
      "baseline": 14,
      "metric_name": "privileged_commands",
      "baseline_mean": "46.78",
      "baseline_stddev": "5.64",
      "deviation": "8.35",
      "metric_value": "55.13",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 209,
    "fields": {
      "baseline": 142,
      "metric_name": "failed_authentications",
      "baseline_mean": "37.68",
      "baseline_stddev": "6.37",
      "deviation": "15.44",
      "metric_value": "53.12",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 210,
    "fields": {
      "baseline": 127,
      "metric_name": "privileged_commands",
      "baseline_mean": "39.14",
      "baseline_stddev": "5.90",
      "deviation": "2.29",
      "metric_value": "41.43",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 211,
    "fields": {
      "baseline": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "46.52",
      "baseline_stddev": "3.93",
      "deviation": "-8.78",
      "metric_value": "37.74",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 212,
    "fields": {
      "baseline": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.22",
      "baseline_stddev": "4.98",
      "deviation": "-0.34",
      "metric_value": "41.88",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 213,
    "fields": {
      "baseline": 2,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.77",
      "baseline_stddev": "8.91",
      "deviation": "-1.23",
      "metric_value": "46.54",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 214,
    "fields": {
      "baseline": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": "35.15",
      "baseline_stddev": "3.71",
      "deviation": "4.71",
      "metric_value": "39.86",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 215,
    "fields": {
      "baseline": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": "21.86",
      "baseline_stddev": "5.81",
      "deviation": "4.54",
      "metric_value": "26.40",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 216,
    "fields": {
      "baseline": 81,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "29.58",
      "baseline_stddev": "7.02",
      "deviation": "3.20",
      "metric_value": "32.78",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 217,
    "fields": {
      "baseline": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "28.93",
      "baseline_stddev": "5.95",
      "deviation": "-11.07",
      "metric_value": "17.86",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 218,
    "fields": {
      "baseline": 82,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.14",
      "baseline_stddev": "4.45",
      "deviation": "-14.12",
      "metric_value": "21.02",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 219,
    "fields": {
      "baseline": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": "45.12",
      "baseline_stddev": "7.21",
      "deviation": "5.62",
      "metric_value": "50.74",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 220,
    "fields": {
      "baseline": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": "30.46",
      "baseline_stddev": "4.78",
      "deviation": "0.61",
      "metric_value": "31.07",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 221,
    "fields": {
      "baseline": 108,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.02",
      "baseline_stddev": "4.88",
      "deviation": "-3.70",
      "metric_value": "48.32",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 222,
    "fields": {
      "baseline": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "27.75",
      "baseline_stddev": "4.70",
      "deviation": "-1.82",
      "metric_value": "25.93",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 223,
    "fields": {
      "baseline": 76,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "48.32",
      "baseline_stddev": "5.99",
      "deviation": "8.52",
      "metric_value": "56.84",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 224,
    "fields": {
      "baseline": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": "46.49",
      "baseline_stddev": "3.50",
      "deviation": "-2.66",
      "metric_value": "43.83",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 225,
    "fields": {
      "baseline": 19,
      "metric_name": "after_hours_actions",
      "baseline_mean": "52.60",
      "baseline_stddev": "3.78",
      "deviation": "8.64",
      "metric_value": "61.24",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 226,
    "fields": {
      "baseline": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": "34.63",
      "baseline_stddev": "4.07",
      "deviation": "-10.92",
      "metric_value": "23.71",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 227,
    "fields": {
      "baseline": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": "53.84",
      "baseline_stddev": "5.26",
      "deviation": "0.12",
      "metric_value": "53.96",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 228,
    "fields": {
      "baseline": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "25.55",
      "baseline_stddev": "6.65",
      "deviation": "-3.39",
      "metric_value": "22.16",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 229,
    "fields": {
      "baseline": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.03",
      "baseline_stddev": "8.20",
      "deviation": "1.37",
      "metric_value": "42.40",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 230,
    "fields": {
      "baseline": 115,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "19.80",
      "baseline_stddev": "4.17",
      "deviation": "3.06",
      "metric_value": "22.86",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 231,
    "fields": {
      "baseline": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "55.56",
      "baseline_stddev": "8.65",
      "deviation": "8.49",
      "metric_value": "64.05",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 232,
    "fields": {
      "baseline": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.21",
      "baseline_stddev": "8.09",
      "deviation": "-1.42",
      "metric_value": "39.79",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 233,
    "fields": {
      "baseline": 87,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "37.79",
      "baseline_stddev": "7.87",
      "deviation": "15.16",
      "metric_value": "52.95",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 234,
    "fields": {
      "baseline": 77,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "34.60",
      "baseline_stddev": "4.88",
      "deviation": "-2.23",
      "metric_value": "32.37",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 235,
    "fields": {
      "baseline": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "27.75",
      "baseline_stddev": "4.70",
      "deviation": "-0.70",
      "metric_value": "27.05",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 236,
    "fields": {
      "baseline": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": "45.12",
      "baseline_stddev": "7.21",
      "deviation": "11.12",
      "metric_value": "56.24",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 237,
    "fields": {
      "baseline": 55,
      "metric_name": "failed_authentications",
      "baseline_mean": "37.02",
      "baseline_stddev": "4.74",
      "deviation": "-0.40",
      "metric_value": "36.62",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 238,
    "fields": {
      "baseline": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": "37.96",
      "baseline_stddev": "4.69",
      "deviation": "0.76",
      "metric_value": "38.72",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 239,
    "fields": {
      "baseline": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.02",
      "baseline_stddev": "4.36",
      "deviation": "-4.65",
      "metric_value": "29.37",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 240,
    "fields": {
      "baseline": 17,
      "metric_name": "failed_authentications",
      "baseline_mean": "48.00",
      "baseline_stddev": "7.45",
      "deviation": "-0.35",
      "metric_value": "47.65",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 241,
    "fields": {
      "baseline": 67,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "48.61",
      "baseline_stddev": "4.64",
      "deviation": "7.07",
      "metric_value": "55.68",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 242,
    "fields": {
      "baseline": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.74",
      "baseline_stddev": "3.99",
      "deviation": "-2.79",
      "metric_value": "32.95",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 243,
    "fields": {
      "baseline": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "46.52",
      "baseline_stddev": "3.93",
      "deviation": "11.15",
      "metric_value": "57.67",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 244,
    "fields": {
      "baseline": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.89",
      "baseline_stddev": "5.26",
      "deviation": "-4.54",
      "metric_value": "28.35",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 245,
    "fields": {
      "baseline": 11,
      "metric_name": "privileged_commands",
      "baseline_mean": "41.52",
      "baseline_stddev": "3.02",
      "deviation": "0.07",
      "metric_value": "41.59",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 246,
    "fields": {
      "baseline": 77,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "34.60",
      "baseline_stddev": "4.88",
      "deviation": "5.49",
      "metric_value": "40.09",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 247,
    "fields": {
      "baseline": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": "35.15",
      "baseline_stddev": "3.71",
      "deviation": "-3.79",
      "metric_value": "31.36",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 248,
    "fields": {
      "baseline": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": "48.48",
      "baseline_stddev": "5.35",
      "deviation": "2.91",
      "metric_value": "51.39",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 249,
    "fields": {
      "baseline": 106,
      "metric_name": "after_hours_actions",
      "baseline_mean": "48.16",
      "baseline_stddev": "3.58",
      "deviation": "2.46",
      "metric_value": "50.62",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 250,
    "fields": {
      "baseline": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "51.31",
      "baseline_stddev": "5.50",
      "deviation": "9.00",
      "metric_value": "60.31",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 251,
    "fields": {
      "baseline": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": "37.96",
      "baseline_stddev": "4.69",
      "deviation": "7.74",
      "metric_value": "45.70",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 252,
    "fields": {
      "baseline": 72,
      "metric_name": "after_hours_actions",
      "baseline_mean": "42.65",
      "baseline_stddev": "5.51",
      "deviation": "4.24",
      "metric_value": "46.89",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 253,
    "fields": {
      "baseline": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": "40.23",
      "baseline_stddev": "3.26",
      "deviation": "-1.56",
      "metric_value": "38.67",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 254,
    "fields": {
      "baseline": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": "61.90",
      "baseline_stddev": "3.17",
      "deviation": "-5.63",
      "metric_value": "56.27",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 255,
    "fields": {
      "baseline": 65,
      "metric_name": "after_hours_actions",
      "baseline_mean": "47.99",
      "baseline_stddev": "3.71",
      "deviation": "-4.36",
      "metric_value": "43.63",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 256,
    "fields": {
      "baseline": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": "48.48",
      "baseline_stddev": "5.35",
      "deviation": "-4.75",
      "metric_value": "43.73",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 257,
    "fields": {
      "baseline": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.02",
      "baseline_stddev": "4.36",
      "deviation": "2.08",
      "metric_value": "36.10",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 258,
    "fields": {
      "baseline": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "27.75",
      "baseline_stddev": "4.70",
      "deviation": "1.59",
      "metric_value": "29.34",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 259,
    "fields": {
      "baseline": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.17",
      "baseline_stddev": "3.53",
      "deviation": "1.36",
      "metric_value": "35.53",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 260,
    "fields": {
      "baseline": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": "40.23",
      "baseline_stddev": "3.26",
      "deviation": "-4.41",
      "metric_value": "35.82",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 261,
    "fields": {
      "baseline": 103,
      "metric_name": "privileged_commands",
      "baseline_mean": "34.81",
      "baseline_stddev": "6.22",
      "deviation": "-8.19",
      "metric_value": "26.62",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 262,
    "fields": {
      "baseline": 64,
      "metric_name": "privileged_commands",
      "baseline_mean": "35.69",
      "baseline_stddev": "7.14",
      "deviation": "7.87",
      "metric_value": "43.56",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 263,
    "fields": {
      "baseline": 11,
      "metric_name": "privileged_commands",
      "baseline_mean": "41.52",
      "baseline_stddev": "3.02",
      "deviation": "7.55",
      "metric_value": "49.07",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 264,
    "fields": {
      "baseline": 102,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "25.02",
      "baseline_stddev": "3.88",
      "deviation": "17.27",
      "metric_value": "42.29",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 265,
    "fields": {
      "baseline": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "51.31",
      "baseline_stddev": "5.50",
      "deviation": "6.08",
      "metric_value": "57.39",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 266,
    "fields": {
      "baseline": 19,
      "metric_name": "after_hours_actions",
      "baseline_mean": "52.60",
      "baseline_stddev": "3.78",
      "deviation": "7.60",
      "metric_value": "60.20",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 267,
    "fields": {
      "baseline": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": "53.84",
      "baseline_stddev": "5.26",
      "deviation": "14.63",
      "metric_value": "68.47",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 268,
    "fields": {
      "baseline": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "38.29",
      "baseline_stddev": "4.56",
      "deviation": "7.07",
      "metric_value": "45.36",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 269,
    "fields": {
      "baseline": 77,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "34.60",
      "baseline_stddev": "4.88",
      "deviation": "3.51",
      "metric_value": "38.11",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 270,
    "fields": {
      "baseline": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "30.32",
      "baseline_stddev": "5.52",
      "deviation": "5.53",
      "metric_value": "35.85",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 271,
    "fields": {
      "baseline": 38,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.41",
      "baseline_stddev": "3.37",
      "deviation": "-0.34",
      "metric_value": "42.07",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 272,
    "fields": {
      "baseline": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.14",
      "baseline_stddev": "3.69",
      "deviation": "-6.99",
      "metric_value": "40.15",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 273,
    "fields": {
      "baseline": 14,
      "metric_name": "privileged_commands",
      "baseline_mean": "46.78",
      "baseline_stddev": "5.64",
      "deviation": "-4.22",
      "metric_value": "42.56",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 274,
    "fields": {
      "baseline": 23,
      "metric_name": "failed_authentications",
      "baseline_mean": "32.70",
      "baseline_stddev": "8.92",
      "deviation": "11.39",
      "metric_value": "44.09",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 275,
    "fields": {
      "baseline": 10,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.61",
      "baseline_stddev": "5.85",
      "deviation": "-3.07",
      "metric_value": "39.54",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 276,
    "fields": {
      "baseline": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "30.32",
      "baseline_stddev": "5.52",
      "deviation": "-7.37",
      "metric_value": "22.95",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 277,
    "fields": {
      "baseline": 62,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "34.58",
      "baseline_stddev": "4.26",
      "deviation": "11.84",
      "metric_value": "46.42",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 278,
    "fields": {
      "baseline": 107,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.93",
      "baseline_stddev": "7.64",
      "deviation": "0.57",
      "metric_value": "53.50",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 279,
    "fields": {
      "baseline": 1,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "46.46",
      "baseline_stddev": "3.55",
      "deviation": "10.84",
      "metric_value": "57.30",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 280,
    "fields": {
      "baseline": 66,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "33.35",
      "baseline_stddev": "3.50",
      "deviation": "9.35",
      "metric_value": "42.70",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 281,
    "fields": {
      "baseline": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": "38.27",
      "baseline_stddev": "3.29",
      "deviation": "10.01",
      "metric_value": "48.28",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 282,
    "fields": {
      "baseline": 74,
      "metric_name": "after_hours_actions",
      "baseline_mean": "49.44",
      "baseline_stddev": "3.24",
      "deviation": "-2.79",
      "metric_value": "46.65",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 283,
    "fields": {
      "baseline": 49,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "37.40",
      "baseline_stddev": "4.51",
      "deviation": "6.19",
      "metric_value": "43.59",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 284,
    "fields": {
      "baseline": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "37.89",
      "baseline_stddev": "4.48",
      "deviation": "8.37",
      "metric_value": "46.26",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 285,
    "fields": {
      "baseline": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.89",
      "baseline_stddev": "8.41",
      "deviation": "9.02",
      "metric_value": "56.91",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 286,
    "fields": {
      "baseline": 57,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "45.61",
      "baseline_stddev": "5.33",
      "deviation": "8.19",
      "metric_value": "53.80",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 287,
    "fields": {
      "baseline": 93,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.09",
      "baseline_stddev": "4.82",
      "deviation": "-2.55",
      "metric_value": "32.54",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 288,
    "fields": {
      "baseline": 50,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "49.01",
      "baseline_stddev": "6.94",
      "deviation": "-3.45",
      "metric_value": "45.56",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 289,
    "fields": {
      "baseline": 68,
      "metric_name": "failed_authentications",
      "baseline_mean": "33.67",
      "baseline_stddev": "8.84",
      "deviation": "1.71",
      "metric_value": "35.38",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 290,
    "fields": {
      "baseline": 43,
      "metric_name": "after_hours_actions",
      "baseline_mean": "39.67",
      "baseline_stddev": "8.45",
      "deviation": "-8.86",
      "metric_value": "30.81",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 291,
    "fields": {
      "baseline": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.74",
      "baseline_stddev": "3.99",
      "deviation": "8.59",
      "metric_value": "44.33",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 292,
    "fields": {
      "baseline": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": "37.96",
      "baseline_stddev": "4.69",
      "deviation": "-1.28",
      "metric_value": "36.68",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 293,
    "fields": {
      "baseline": 48,
      "metric_name": "failed_authentications",
      "baseline_mean": "48.10",
      "baseline_stddev": "7.35",
      "deviation": "5.33",
      "metric_value": "53.43",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 294,
    "fields": {
      "baseline": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": "33.82",
      "baseline_stddev": "6.10",
      "deviation": "4.87",
      "metric_value": "38.69",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 295,
    "fields": {
      "baseline": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "27.30",
      "baseline_stddev": "6.75",
      "deviation": "9.25",
      "metric_value": "36.55",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 296,
    "fields": {
      "baseline": 122,
      "metric_name": "after_hours_actions",
      "baseline_mean": "34.55",
      "baseline_stddev": "8.23",
      "deviation": "-2.68",
      "metric_value": "31.87",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 297,
    "fields": {
      "baseline": 67,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "48.61",
      "baseline_stddev": "4.64",
      "deviation": "10.38",
      "metric_value": "58.99",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 298,
    "fields": {
      "baseline": 4,
      "metric_name": "privileged_commands",
      "baseline_mean": "27.18",
      "baseline_stddev": "6.73",
      "deviation": "5.01",
      "metric_value": "32.19",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 299,
    "fields": {
      "baseline": 130,
      "metric_name": "failed_authentications",
      "baseline_mean": "46.54",
      "baseline_stddev": "5.21",
      "deviation": "18.95",
      "metric_value": "65.49",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 300,
    "fields": {
      "baseline": 70,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "42.29",
      "baseline_stddev": "6.47",
      "deviation": "8.48",
      "metric_value": "50.77",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 301,
    "fields": {
      "baseline": 101,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "52.70",
      "baseline_stddev": "8.21",
      "deviation": "-6.41",
      "metric_value": "46.29",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 302,
    "fields": {
      "baseline": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": "61.90",
      "baseline_stddev": "3.17",
      "deviation": "6.33",
      "metric_value": "68.23",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 303,
    "fields": {
      "baseline": 107,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.93",
      "baseline_stddev": "7.64",
      "deviation": "-5.12",
      "metric_value": "47.81",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 304,
    "fields": {
      "baseline": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "36.23",
      "baseline_stddev": "6.56",
      "deviation": "3.67",
      "metric_value": "39.90",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 305,
    "fields": {
      "baseline": 62,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "34.58",
      "baseline_stddev": "4.26",
      "deviation": "3.87",
      "metric_value": "38.45",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 306,
    "fields": {
      "baseline": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "38.29",
      "baseline_stddev": "4.56",
      "deviation": "-7.67",
      "metric_value": "30.62",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 307,
    "fields": {
      "baseline": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": "46.49",
      "baseline_stddev": "3.50",
      "deviation": "10.38",
      "metric_value": "56.87",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 308,
    "fields": {
      "baseline": 60,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.83",
      "baseline_stddev": "3.27",
      "deviation": "-3.38",
      "metric_value": "44.45",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 309,
    "fields": {
      "baseline": 117,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "31.93",
      "baseline_stddev": "6.91",
      "deviation": "-6.46",
      "metric_value": "25.47",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 310,
    "fields": {
      "baseline": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.70",
      "baseline_stddev": "4.92",
      "deviation": "6.09",
      "metric_value": "47.79",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 311,
    "fields": {
      "baseline": 122,
      "metric_name": "after_hours_actions",
      "baseline_mean": "34.55",
      "baseline_stddev": "8.23",
      "deviation": "5.81",
      "metric_value": "40.36",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 312,
    "fields": {
      "baseline": 92,
      "metric_name": "privileged_commands",
      "baseline_mean": "42.06",
      "baseline_stddev": "5.96",
      "deviation": "-2.65",
      "metric_value": "39.41",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 313,
    "fields": {
      "baseline": 60,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.83",
      "baseline_stddev": "3.27",
      "deviation": "-1.50",
      "metric_value": "46.33",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 314,
    "fields": {
      "baseline": 121,
      "metric_name": "after_hours_actions",
      "baseline_mean": "47.44",
      "baseline_stddev": "3.90",
      "deviation": "1.01",
      "metric_value": "48.45",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 315,
    "fields": {
      "baseline": 96,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "55.62",
      "baseline_stddev": "4.46",
      "deviation": "-9.90",
      "metric_value": "45.72",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 316,
    "fields": {
      "baseline": 107,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.93",
      "baseline_stddev": "7.64",
      "deviation": "16.31",
      "metric_value": "69.24",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 317,
    "fields": {
      "baseline": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.17",
      "baseline_stddev": "3.53",
      "deviation": "-21.90",
      "metric_value": "12.27",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 318,
    "fields": {
      "baseline": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": "46.49",
      "baseline_stddev": "3.50",
      "deviation": "7.49",
      "metric_value": "53.98",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 319,
    "fields": {
      "baseline": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": "45.12",
      "baseline_stddev": "7.21",
      "deviation": "0.72",
      "metric_value": "45.84",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 320,
    "fields": {
      "baseline": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "28.93",
      "baseline_stddev": "5.95",
      "deviation": "4.05",
      "metric_value": "32.98",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 321,
    "fields": {
      "baseline": 5,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "22.54",
      "baseline_stddev": "5.73",
      "deviation": "2.09",
      "metric_value": "24.63",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 322,
    "fields": {
      "baseline": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "27.30",
      "baseline_stddev": "6.75",
      "deviation": "8.43",
      "metric_value": "35.73",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 323,
    "fields": {
      "baseline": 143,
      "metric_name": "after_hours_actions",
      "baseline_mean": "42.06",
      "baseline_stddev": "4.27",
      "deviation": "-8.96",
      "metric_value": "33.10",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 324,
    "fields": {
      "baseline": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "37.89",
      "baseline_stddev": "4.48",
      "deviation": "5.96",
      "metric_value": "43.85",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 325,
    "fields": {
      "baseline": 44,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "59.76",
      "baseline_stddev": "4.32",
      "deviation": "3.97",
      "metric_value": "63.73",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 326,
    "fields": {
      "baseline": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": "35.15",
      "baseline_stddev": "3.71",
      "deviation": "7.13",
      "metric_value": "42.28",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 327,
    "fields": {
      "baseline": 143,
      "metric_name": "after_hours_actions",
      "baseline_mean": "42.06",
      "baseline_stddev": "4.27",
      "deviation": "-9.24",
      "metric_value": "32.82",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 328,
    "fields": {
      "baseline": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.21",
      "baseline_stddev": "8.09",
      "deviation": "-4.99",
      "metric_value": "36.22",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 329,
    "fields": {
      "baseline": 72,
      "metric_name": "after_hours_actions",
      "baseline_mean": "42.65",
      "baseline_stddev": "5.51",
      "deviation": "4.70",
      "metric_value": "47.35",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 330,
    "fields": {
      "baseline": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": "48.48",
      "baseline_stddev": "5.35",
      "deviation": "9.74",
      "metric_value": "58.22",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 331,
    "fields": {
      "baseline": 45,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "32.31",
      "baseline_stddev": "3.18",
      "deviation": "-4.18",
      "metric_value": "28.13",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 332,
    "fields": {
      "baseline": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.02",
      "baseline_stddev": "4.36",
      "deviation": "-2.19",
      "metric_value": "31.83",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 333,
    "fields": {
      "baseline": 115,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "19.80",
      "baseline_stddev": "4.17",
      "deviation": "10.44",
      "metric_value": "30.24",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 334,
    "fields": {
      "baseline": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": "33.82",
      "baseline_stddev": "6.10",
      "deviation": "-5.86",
      "metric_value": "27.96",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 335,
    "fields": {
      "baseline": 42,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "46.25",
      "baseline_stddev": "3.74",
      "deviation": "8.52",
      "metric_value": "54.77",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 336,
    "fields": {
      "baseline": 141,
      "metric_name": "privileged_commands",
      "baseline_mean": "53.45",
      "baseline_stddev": "4.83",
      "deviation": "-1.64",
      "metric_value": "51.81",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 337,
    "fields": {
      "baseline": 12,
      "metric_name": "privileged_commands",
      "baseline_mean": "44.31",
      "baseline_stddev": "6.55",
      "deviation": "-3.94",
      "metric_value": "40.37",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 338,
    "fields": {
      "baseline": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.89",
      "baseline_stddev": "8.41",
      "deviation": "-5.27",
      "metric_value": "42.62",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 339,
    "fields": {
      "baseline": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": "53.84",
      "baseline_stddev": "5.26",
      "deviation": "-5.94",
      "metric_value": "47.90",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 340,
    "fields": {
      "baseline": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.74",
      "baseline_stddev": "3.99",
      "deviation": "-0.14",
      "metric_value": "35.60",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 341,
    "fields": {
      "baseline": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.89",
      "baseline_stddev": "8.41",
      "deviation": "3.39",
      "metric_value": "51.28",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 342,
    "fields": {
      "baseline": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "38.29",
      "baseline_stddev": "4.56",
      "deviation": "0.47",
      "metric_value": "38.76",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 343,
    "fields": {
      "baseline": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "51.31",
      "baseline_stddev": "5.50",
      "deviation": "-3.97",
      "metric_value": "47.34",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 344,
    "fields": {
      "baseline": 141,
      "metric_name": "privileged_commands",
      "baseline_mean": "53.45",
      "baseline_stddev": "4.83",
      "deviation": "9.54",
      "metric_value": "62.99",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 345,
    "fields": {
      "baseline": 15,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "42.09",
      "baseline_stddev": "7.79",
      "deviation": "-4.79",
      "metric_value": "37.30",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 346,
    "fields": {
      "baseline": 35,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "36.56",
      "baseline_stddev": "6.43",
      "deviation": "3.83",
      "metric_value": "40.39",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 347,
    "fields": {
      "baseline": 101,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "52.70",
      "baseline_stddev": "8.21",
      "deviation": "3.16",
      "metric_value": "55.86",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 348,
    "fields": {
      "baseline": 106,
      "metric_name": "after_hours_actions",
      "baseline_mean": "48.16",
      "baseline_stddev": "3.58",
      "deviation": "2.62",
      "metric_value": "50.78",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 349,
    "fields": {
      "baseline": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": "30.46",
      "baseline_stddev": "4.78",
      "deviation": "-6.84",
      "metric_value": "23.62",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 350,
    "fields": {
      "baseline": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": "33.82",
      "baseline_stddev": "6.10",
      "deviation": "-2.52",
      "metric_value": "31.30",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 351,
    "fields": {
      "baseline": 5,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "22.54",
      "baseline_stddev": "5.73",
      "deviation": "-5.46",
      "metric_value": "17.08",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 352,
    "fields": {
      "baseline": 10,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.61",
      "baseline_stddev": "5.85",
      "deviation": "-7.54",
      "metric_value": "35.07",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 353,
    "fields": {
      "baseline": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "55.56",
      "baseline_stddev": "8.65",
      "deviation": "-13.56",
      "metric_value": "42.00",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 354,
    "fields": {
      "baseline": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": "21.86",
      "baseline_stddev": "5.81",
      "deviation": "3.74",
      "metric_value": "25.60",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 355,
    "fields": {
      "baseline": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "46.52",
      "baseline_stddev": "3.93",
      "deviation": "-11.75",
      "metric_value": "34.77",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 356,
    "fields": {
      "baseline": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.03",
      "baseline_stddev": "8.20",
      "deviation": "-2.43",
      "metric_value": "38.60",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 357,
    "fields": {
      "baseline": 94,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "35.90",
      "baseline_stddev": "6.88",
      "deviation": "-1.35",
      "metric_value": "34.55",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 358,
    "fields": {
      "baseline": 123,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "32.39",
      "baseline_stddev": "6.06",
      "deviation": "-3.27",
      "metric_value": "29.12",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 359,
    "fields": {
      "baseline": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "38.29",
      "baseline_stddev": "4.56",
      "deviation": "4.82",
      "metric_value": "43.11",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 360,
    "fields": {
      "baseline": 47,
      "metric_name": "after_hours_actions",
      "baseline_mean": "37.08",
      "baseline_stddev": "5.21",
      "deviation": "0.59",
      "metric_value": "37.67",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 361,
    "fields": {
      "baseline": 92,
      "metric_name": "privileged_commands",
      "baseline_mean": "42.06",
      "baseline_stddev": "5.96",
      "deviation": "-8.90",
      "metric_value": "33.16",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 362,
    "fields": {
      "baseline": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.03",
      "baseline_stddev": "8.20",
      "deviation": "5.84",
      "metric_value": "46.87",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 363,
    "fields": {
      "baseline": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "48.60",
      "baseline_stddev": "7.36",
      "deviation": "5.61",
      "metric_value": "54.21",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 364,
    "fields": {
      "baseline": 97,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "31.22",
      "baseline_stddev": "7.04",
      "deviation": "5.62",
      "metric_value": "36.84",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 365,
    "fields": {
      "baseline": 99,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "27.83",
      "baseline_stddev": "3.59",
      "deviation": "1.25",
      "metric_value": "29.08",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 366,
    "fields": {
      "baseline": 98,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "39.59",
      "baseline_stddev": "6.53",
      "deviation": "2.03",
      "metric_value": "41.62",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 367,
    "fields": {
      "baseline": 119,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "40.07",
      "baseline_stddev": "8.34",
      "deviation": "-8.70",
      "metric_value": "31.37",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 368,
    "fields": {
      "baseline": 123,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "32.39",
      "baseline_stddev": "6.06",
      "deviation": "-1.68",
      "metric_value": "30.71",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 369,
    "fields": {
      "baseline": 104,
      "metric_name": "after_hours_actions",
      "baseline_mean": "27.59",
      "baseline_stddev": "8.27",
      "deviation": "-7.09",
      "metric_value": "20.50",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 370,
    "fields": {
      "baseline": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.89",
      "baseline_stddev": "5.26",
      "deviation": "-14.99",
      "metric_value": "17.90",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 371,
    "fields": {
      "baseline": 88,
      "metric_name": "privileged_commands",
      "baseline_mean": "21.65",
      "baseline_stddev": "5.31",
      "deviation": "-1.50",
      "metric_value": "20.15",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 372,
    "fields": {
      "baseline": 49,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "37.40",
      "baseline_stddev": "4.51",
      "deviation": "-8.45",
      "metric_value": "28.95",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 373,
    "fields": {
      "baseline": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.51",
      "baseline_stddev": "5.20",
      "deviation": "3.91",
      "metric_value": "36.42",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 374,
    "fields": {
      "baseline": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "27.30",
      "baseline_stddev": "6.75",
      "deviation": "-4.94",
      "metric_value": "22.36",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 375,
    "fields": {
      "baseline": 2,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.77",
      "baseline_stddev": "8.91",
      "deviation": "-6.85",
      "metric_value": "40.92",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 376,
    "fields": {
      "baseline": 19,
      "metric_name": "after_hours_actions",
      "baseline_mean": "52.60",
      "baseline_stddev": "3.78",
      "deviation": "-2.03",
      "metric_value": "50.57",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 377,
    "fields": {
      "baseline": 15,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "42.09",
      "baseline_stddev": "7.79",
      "deviation": "-3.99",
      "metric_value": "38.10",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 378,
    "fields": {
      "baseline": 93,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.09",
      "baseline_stddev": "4.82",
      "deviation": "-2.73",
      "metric_value": "32.36",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 379,
    "fields": {
      "baseline": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": "45.12",
      "baseline_stddev": "7.21",
      "deviation": "0.37",
      "metric_value": "45.49",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 380,
    "fields": {
      "baseline": 81,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "29.58",
      "baseline_stddev": "7.02",
      "deviation": "-3.82",
      "metric_value": "25.76",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 381,
    "fields": {
      "baseline": 136,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "33.91",
      "baseline_stddev": "6.69",
      "deviation": "4.70",
      "metric_value": "38.61",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 382,
    "fields": {
      "baseline": 28,
      "metric_name": "after_hours_actions",
      "baseline_mean": "31.73",
      "baseline_stddev": "7.70",
      "deviation": "7.74",
      "metric_value": "39.47",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 383,
    "fields": {
      "baseline": 26,
      "metric_name": "after_hours_actions",
      "baseline_mean": "16.89",
      "baseline_stddev": "7.02",
      "deviation": "4.32",
      "metric_value": "21.21",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 384,
    "fields": {
      "baseline": 98,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "39.59",
      "baseline_stddev": "6.53",
      "deviation": "7.22",
      "metric_value": "46.81",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 385,
    "fields": {
      "baseline": 9,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "26.84",
      "baseline_stddev": "3.25",
      "deviation": "3.31",
      "metric_value": "30.15",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 386,
    "fields": {
      "baseline": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "42.87",
      "baseline_stddev": "5.14",
      "deviation": "-3.83",
      "metric_value": "39.04",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 387,
    "fields": {
      "baseline": 98,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "39.59",
      "baseline_stddev": "6.53",
      "deviation": "-2.27",
      "metric_value": "37.32",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 388,
    "fields": {
      "baseline": 63,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "31.54",
      "baseline_stddev": "8.17",
      "deviation": "10.46",
      "metric_value": "42.00",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 389,
    "fields": {
      "baseline": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": "35.15",
      "baseline_stddev": "3.71",
      "deviation": "3.49",
      "metric_value": "38.64",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 390,
    "fields": {
      "baseline": 118,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "39.43",
      "baseline_stddev": "5.98",
      "deviation": "-1.66",
      "metric_value": "37.77",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 391,
    "fields": {
      "baseline": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": "63.56",
      "baseline_stddev": "7.66",
      "deviation": "-0.94",
      "metric_value": "62.62",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 392,
    "fields": {
      "baseline": 65,
      "metric_name": "after_hours_actions",
      "baseline_mean": "47.99",
      "baseline_stddev": "3.71",
      "deviation": "-3.99",
      "metric_value": "44.00",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 393,
    "fields": {
      "baseline": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.89",
      "baseline_stddev": "8.41",
      "deviation": "2.18",
      "metric_value": "50.07",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 394,
    "fields": {
      "baseline": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": "33.82",
      "baseline_stddev": "6.10",
      "deviation": "8.87",
      "metric_value": "42.69",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 395,
    "fields": {
      "baseline": 130,
      "metric_name": "failed_authentications",
      "baseline_mean": "46.54",
      "baseline_stddev": "5.21",
      "deviation": "-3.54",
      "metric_value": "43.00",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 396,
    "fields": {
      "baseline": 33,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "32.15",
      "baseline_stddev": "6.52",
      "deviation": "9.61",
      "metric_value": "41.76",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 397,
    "fields": {
      "baseline": 29,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.00",
      "baseline_stddev": "4.99",
      "deviation": "23.05",
      "metric_value": "75.05",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 398,
    "fields": {
      "baseline": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.14",
      "baseline_stddev": "3.69",
      "deviation": "-0.97",
      "metric_value": "46.17",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 399,
    "fields": {
      "baseline": 57,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "45.61",
      "baseline_stddev": "5.33",
      "deviation": "1.98",
      "metric_value": "47.59",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 400,
    "fields": {
      "baseline": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": "38.01",
      "baseline_stddev": "7.08",
      "deviation": "7.33",
      "metric_value": "45.34",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 401,
    "fields": {
      "baseline": 68,
      "metric_name": "failed_authentications",
      "baseline_mean": "33.67",
      "baseline_stddev": "8.84",
      "deviation": "-4.41",
      "metric_value": "29.26",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 402,
    "fields": {
      "baseline": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.17",
      "baseline_stddev": "3.53",
      "deviation": "7.06",
      "metric_value": "41.23",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 403,
    "fields": {
      "baseline": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.21",
      "baseline_stddev": "8.09",
      "deviation": "4.91",
      "metric_value": "46.12",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 404,
    "fields": {
      "baseline": 74,
      "metric_name": "after_hours_actions",
      "baseline_mean": "49.44",
      "baseline_stddev": "3.24",
      "deviation": "5.62",
      "metric_value": "55.06",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 405,
    "fields": {
      "baseline": 56,
      "metric_name": "privileged_commands",
      "baseline_mean": "40.15",
      "baseline_stddev": "7.54",
      "deviation": "4.58",
      "metric_value": "44.73",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 406,
    "fields": {
      "baseline": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.22",
      "baseline_stddev": "4.98",
      "deviation": "-6.84",
      "metric_value": "35.38",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 407,
    "fields": {
      "baseline": 66,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "33.35",
      "baseline_stddev": "3.50",
      "deviation": "-2.49",
      "metric_value": "30.86",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 408,
    "fields": {
      "baseline": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": "46.49",
      "baseline_stddev": "3.50",
      "deviation": "2.00",
      "metric_value": "48.49",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 409,
    "fields": {
      "baseline": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": "40.23",
      "baseline_stddev": "3.26",
      "deviation": "-6.92",
      "metric_value": "33.31",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 410,
    "fields": {
      "baseline": 119,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "40.07",
      "baseline_stddev": "8.34",
      "deviation": "4.34",
      "metric_value": "44.41",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 411,
    "fields": {
      "baseline": 63,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "31.54",
      "baseline_stddev": "8.17",
      "deviation": "-6.36",
      "metric_value": "25.18",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 412,
    "fields": {
      "baseline": 115,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "19.80",
      "baseline_stddev": "4.17",
      "deviation": "9.45",
      "metric_value": "29.25",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 413,
    "fields": {
      "baseline": 35,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "36.56",
      "baseline_stddev": "6.43",
      "deviation": "0.02",
      "metric_value": "36.58",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 414,
    "fields": {
      "baseline": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "36.23",
      "baseline_stddev": "6.56",
      "deviation": "3.59",
      "metric_value": "39.82",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 415,
    "fields": {
      "baseline": 16,
      "metric_name": "failed_authentications",
      "baseline_mean": "54.84",
      "baseline_stddev": "8.29",
      "deviation": "2.08",
      "metric_value": "56.92",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 416,
    "fields": {
      "baseline": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.74",
      "baseline_stddev": "3.99",
      "deviation": "3.85",
      "metric_value": "39.59",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 417,
    "fields": {
      "baseline": 96,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "55.62",
      "baseline_stddev": "4.46",
      "deviation": "3.44",
      "metric_value": "59.06",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 418,
    "fields": {
      "baseline": 108,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.02",
      "baseline_stddev": "4.88",
      "deviation": "-11.14",
      "metric_value": "40.88",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 419,
    "fields": {
      "baseline": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.51",
      "baseline_stddev": "5.20",
      "deviation": "10.84",
      "metric_value": "43.35",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 420,
    "fields": {
      "baseline": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.73",
      "baseline_stddev": "7.79",
      "deviation": "1.36",
      "metric_value": "49.09",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 421,
    "fields": {
      "baseline": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.43",
      "baseline_stddev": "8.80",
      "deviation": "1.93",
      "metric_value": "43.36",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 422,
    "fields": {
      "baseline": 38,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.41",
      "baseline_stddev": "3.37",
      "deviation": "-2.72",
      "metric_value": "39.69",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 423,
    "fields": {
      "baseline": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": "63.56",
      "baseline_stddev": "7.66",
      "deviation": "-4.92",
      "metric_value": "58.64",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 424,
    "fields": {
      "baseline": 118,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "39.43",
      "baseline_stddev": "5.98",
      "deviation": "6.65",
      "metric_value": "46.08",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 425,
    "fields": {
      "baseline": 56,
      "metric_name": "privileged_commands",
      "baseline_mean": "40.15",
      "baseline_stddev": "7.54",
      "deviation": "7.62",
      "metric_value": "47.77",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 426,
    "fields": {
      "baseline": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "51.31",
      "baseline_stddev": "5.50",
      "deviation": "7.82",
      "metric_value": "59.13",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 427,
    "fields": {
      "baseline": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.89",
      "baseline_stddev": "5.26",
      "deviation": "2.46",
      "metric_value": "35.35",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 428,
    "fields": {
      "baseline": 119,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "40.07",
      "baseline_stddev": "8.34",
      "deviation": "6.96",
      "metric_value": "47.03",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 429,
    "fields": {
      "baseline": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "28.93",
      "baseline_stddev": "5.95",
      "deviation": "-1.21",
      "metric_value": "27.72",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 430,
    "fields": {
      "baseline": 6,
      "metric_name": "failed_authentications",
      "baseline_mean": "32.76",
      "baseline_stddev": "4.46",
      "deviation": "2.58",
      "metric_value": "35.34",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 431,
    "fields": {
      "baseline": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": "38.01",
      "baseline_stddev": "7.08",
      "deviation": "-0.82",
      "metric_value": "37.19",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 432,
    "fields": {
      "baseline": 127,
      "metric_name": "privileged_commands",
      "baseline_mean": "39.14",
      "baseline_stddev": "5.90",
      "deviation": "-6.56",
      "metric_value": "32.58",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 433,
    "fields": {
      "baseline": 141,
      "metric_name": "privileged_commands",
      "baseline_mean": "53.45",
      "baseline_stddev": "4.83",
      "deviation": "3.34",
      "metric_value": "56.79",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 434,
    "fields": {
      "baseline": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "28.93",
      "baseline_stddev": "5.95",
      "deviation": "1.01",
      "metric_value": "29.94",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 435,
    "fields": {
      "baseline": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.02",
      "baseline_stddev": "4.36",
      "deviation": "0.50",
      "metric_value": "34.52",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 436,
    "fields": {
      "baseline": 113,
      "metric_name": "after_hours_actions",
      "baseline_mean": "39.34",
      "baseline_stddev": "6.19",
      "deviation": "-1.69",
      "metric_value": "37.65",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 437,
    "fields": {
      "baseline": 12,
      "metric_name": "privileged_commands",
      "baseline_mean": "44.31",
      "baseline_stddev": "6.55",
      "deviation": "-0.76",
      "metric_value": "43.55",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 438,
    "fields": {
      "baseline": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.74",
      "baseline_stddev": "3.99",
      "deviation": "1.35",
      "metric_value": "37.09",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 439,
    "fields": {
      "baseline": 131,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.94",
      "baseline_stddev": "3.32",
      "deviation": "-6.56",
      "metric_value": "35.38",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 440,
    "fields": {
      "baseline": 15,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "42.09",
      "baseline_stddev": "7.79",
      "deviation": "2.97",
      "metric_value": "45.06",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 441,
    "fields": {
      "baseline": 50,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "49.01",
      "baseline_stddev": "6.94",
      "deviation": "10.70",
      "metric_value": "59.71",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 442,
    "fields": {
      "baseline": 87,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "37.79",
      "baseline_stddev": "7.87",
      "deviation": "4.18",
      "metric_value": "41.97",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 443,
    "fields": {
      "baseline": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.70",
      "baseline_stddev": "4.92",
      "deviation": "4.09",
      "metric_value": "45.79",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 444,
    "fields": {
      "baseline": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.22",
      "baseline_stddev": "4.98",
      "deviation": "-4.02",
      "metric_value": "38.20",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 445,
    "fields": {
      "baseline": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "48.60",
      "baseline_stddev": "7.36",
      "deviation": "-1.20",
      "metric_value": "47.40",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 446,
    "fields": {
      "baseline": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.02",
      "baseline_stddev": "4.36",
      "deviation": "-1.24",
      "metric_value": "32.78",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 447,
    "fields": {
      "baseline": 41,
      "metric_name": "privileged_commands",
      "baseline_mean": "32.62",
      "baseline_stddev": "7.61",
      "deviation": "11.39",
      "metric_value": "44.01",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 448,
    "fields": {
      "baseline": 12,
      "metric_name": "privileged_commands",
      "baseline_mean": "44.31",
      "baseline_stddev": "6.55",
      "deviation": "-4.33",
      "metric_value": "39.98",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 449,
    "fields": {
      "baseline": 70,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "42.29",
      "baseline_stddev": "6.47",
      "deviation": "-0.66",
      "metric_value": "41.63",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 450,
    "fields": {
      "baseline": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "25.55",
      "baseline_stddev": "6.65",
      "deviation": "-3.95",
      "metric_value": "21.60",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 451,
    "fields": {
      "baseline": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": "21.86",
      "baseline_stddev": "5.81",
      "deviation": "-4.50",
      "metric_value": "17.36",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 452,
    "fields": {
      "baseline": 143,
      "metric_name": "after_hours_actions",
      "baseline_mean": "42.06",
      "baseline_stddev": "4.27",
      "deviation": "-5.00",
      "metric_value": "37.06",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 453,
    "fields": {
      "baseline": 79,
      "metric_name": "after_hours_actions",
      "baseline_mean": "52.50",
      "baseline_stddev": "5.32",
      "deviation": "-2.57",
      "metric_value": "49.93",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 454,
    "fields": {
      "baseline": 131,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.94",
      "baseline_stddev": "3.32",
      "deviation": "-2.50",
      "metric_value": "39.44",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 455,
    "fields": {
      "baseline": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "42.87",
      "baseline_stddev": "5.14",
      "deviation": "-0.97",
      "metric_value": "41.90",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 456,
    "fields": {
      "baseline": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": "35.15",
      "baseline_stddev": "3.71",
      "deviation": "-6.58",
      "metric_value": "28.57",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 457,
    "fields": {
      "baseline": 88,
      "metric_name": "privileged_commands",
      "baseline_mean": "21.65",
      "baseline_stddev": "5.31",
      "deviation": "4.70",
      "metric_value": "26.35",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 458,
    "fields": {
      "baseline": 91,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "32.43",
      "baseline_stddev": "6.60",
      "deviation": "-6.30",
      "metric_value": "26.13",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 459,
    "fields": {
      "baseline": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "46.52",
      "baseline_stddev": "3.93",
      "deviation": "9.42",
      "metric_value": "55.94",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 460,
    "fields": {
      "baseline": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "37.89",
      "baseline_stddev": "4.48",
      "deviation": "-2.66",
      "metric_value": "35.23",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 461,
    "fields": {
      "baseline": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.21",
      "baseline_stddev": "8.09",
      "deviation": "6.90",
      "metric_value": "48.11",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 462,
    "fields": {
      "baseline": 105,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "36.37",
      "baseline_stddev": "7.35",
      "deviation": "1.19",
      "metric_value": "37.56",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 463,
    "fields": {
      "baseline": 136,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "33.91",
      "baseline_stddev": "6.69",
      "deviation": "8.61",
      "metric_value": "42.52",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 464,
    "fields": {
      "baseline": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.51",
      "baseline_stddev": "5.20",
      "deviation": "0.46",
      "metric_value": "32.97",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 465,
    "fields": {
      "baseline": 97,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "31.22",
      "baseline_stddev": "7.04",
      "deviation": "-0.31",
      "metric_value": "30.91",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 466,
    "fields": {
      "baseline": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.43",
      "baseline_stddev": "8.80",
      "deviation": "2.82",
      "metric_value": "44.25",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 467,
    "fields": {
      "baseline": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": "38.27",
      "baseline_stddev": "3.29",
      "deviation": "3.77",
      "metric_value": "42.04",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 468,
    "fields": {
      "baseline": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "27.30",
      "baseline_stddev": "6.75",
      "deviation": "-1.15",
      "metric_value": "26.15",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 469,
    "fields": {
      "baseline": 71,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "45.63",
      "baseline_stddev": "8.74",
      "deviation": "2.85",
      "metric_value": "48.48",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 470,
    "fields": {
      "baseline": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.73",
      "baseline_stddev": "7.79",
      "deviation": "8.54",
      "metric_value": "56.27",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 471,
    "fields": {
      "baseline": 122,
      "metric_name": "after_hours_actions",
      "baseline_mean": "34.55",
      "baseline_stddev": "8.23",
      "deviation": "5.69",
      "metric_value": "40.24",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 472,
    "fields": {
      "baseline": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.70",
      "baseline_stddev": "4.92",
      "deviation": "2.07",
      "metric_value": "43.77",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 473,
    "fields": {
      "baseline": 3,
      "metric_name": "failed_authentications",
      "baseline_mean": "54.01",
      "baseline_stddev": "8.84",
      "deviation": "-3.39",
      "metric_value": "50.62",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 474,
    "fields": {
      "baseline": 40,
      "metric_name": "after_hours_actions",
      "baseline_mean": "45.77",
      "baseline_stddev": "8.30",
      "deviation": "15.12",
      "metric_value": "60.89",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 475,
    "fields": {
      "baseline": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.22",
      "baseline_stddev": "4.98",
      "deviation": "8.29",
      "metric_value": "50.51",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 476,
    "fields": {
      "baseline": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": "34.63",
      "baseline_stddev": "4.07",
      "deviation": "-3.74",
      "metric_value": "30.89",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 477,
    "fields": {
      "baseline": 5,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "22.54",
      "baseline_stddev": "5.73",
      "deviation": "0.43",
      "metric_value": "22.97",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 478,
    "fields": {
      "baseline": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": "24.25",
      "baseline_stddev": "3.09",
      "deviation": "8.81",
      "metric_value": "33.06",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 479,
    "fields": {
      "baseline": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "30.32",
      "baseline_stddev": "5.52",
      "deviation": "-0.99",
      "metric_value": "29.33",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 480,
    "fields": {
      "baseline": 64,
      "metric_name": "privileged_commands",
      "baseline_mean": "35.69",
      "baseline_stddev": "7.14",
      "deviation": "-5.32",
      "metric_value": "30.37",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 481,
    "fields": {
      "baseline": 62,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "34.58",
      "baseline_stddev": "4.26",
      "deviation": "14.31",
      "metric_value": "48.89",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 482,
    "fields": {
      "baseline": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.22",
      "baseline_stddev": "4.98",
      "deviation": "-6.66",
      "metric_value": "35.56",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 483,
    "fields": {
      "baseline": 18,
      "metric_name": "failed_authentications",
      "baseline_mean": "39.22",
      "baseline_stddev": "4.32",
      "deviation": "-11.38",
      "metric_value": "27.84",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 484,
    "fields": {
      "baseline": 10,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.61",
      "baseline_stddev": "5.85",
      "deviation": "-2.23",
      "metric_value": "40.38",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 485,
    "fields": {
      "baseline": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.51",
      "baseline_stddev": "5.20",
      "deviation": "0.98",
      "metric_value": "33.49",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 486,
    "fields": {
      "baseline": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": "61.90",
      "baseline_stddev": "3.17",
      "deviation": "-1.47",
      "metric_value": "60.43",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 487,
    "fields": {
      "baseline": 142,
      "metric_name": "failed_authentications",
      "baseline_mean": "37.68",
      "baseline_stddev": "6.37",
      "deviation": "13.63",
      "metric_value": "51.31",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 488,
    "fields": {
      "baseline": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "27.30",
      "baseline_stddev": "6.75",
      "deviation": "2.09",
      "metric_value": "29.39",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 489,
    "fields": {
      "baseline": 29,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.00",
      "baseline_stddev": "4.99",
      "deviation": "-1.22",
      "metric_value": "50.78",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 490,
    "fields": {
      "baseline": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.03",
      "baseline_stddev": "8.20",
      "deviation": "11.00",
      "metric_value": "52.03",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 491,
    "fields": {
      "baseline": 50,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "49.01",
      "baseline_stddev": "6.94",
      "deviation": "-3.76",
      "metric_value": "45.25",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 492,
    "fields": {
      "baseline": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.73",
      "baseline_stddev": "7.79",
      "deviation": "-1.29",
      "metric_value": "46.44",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 493,
    "fields": {
      "baseline": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": "38.27",
      "baseline_stddev": "3.29",
      "deviation": "-3.74",
      "metric_value": "34.53",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 494,
    "fields": {
      "baseline": 79,
      "metric_name": "after_hours_actions",
      "baseline_mean": "52.50",
      "baseline_stddev": "5.32",
      "deviation": "1.51",
      "metric_value": "54.01",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 495,
    "fields": {
      "baseline": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "25.55",
      "baseline_stddev": "6.65",
      "deviation": "-5.83",
      "metric_value": "19.72",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 496,
    "fields": {
      "baseline": 4,
      "metric_name": "privileged_commands",
      "baseline_mean": "27.18",
      "baseline_stddev": "6.73",
      "deviation": "8.35",
      "metric_value": "35.53",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 497,
    "fields": {
      "baseline": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": "38.27",
      "baseline_stddev": "3.29",
      "deviation": "5.90",
      "metric_value": "44.17",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 498,
    "fields": {
      "baseline": 12,
      "metric_name": "privileged_commands",
      "baseline_mean": "44.31",
      "baseline_stddev": "6.55",
      "deviation": "-5.59",
      "metric_value": "38.72",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 499,
    "fields": {
      "baseline": 102,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "25.02",
      "baseline_stddev": "3.88",
      "deviation": "12.10",
      "metric_value": "37.12",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 500,
    "fields": {
      "baseline": 33,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "32.15",
      "baseline_stddev": "6.52",
      "deviation": "-2.39",
      "metric_value": "29.76",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 501,
    "fields": {
      "baseline": 44,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "59.76",
      "baseline_stddev": "4.32",
      "deviation": "-0.54",
      "metric_value": "59.22",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 502,
    "fields": {
      "baseline": 131,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.94",
      "baseline_stddev": "3.32",
      "deviation": "-5.01",
      "metric_value": "36.93",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 503,
    "fields": {
      "baseline": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "51.31",
      "baseline_stddev": "5.50",
      "deviation": "-15.73",
      "metric_value": "35.58",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 504,
    "fields": {
      "baseline": 108,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.02",
      "baseline_stddev": "4.88",
      "deviation": "-6.59",
      "metric_value": "45.43",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 505,
    "fields": {
      "baseline": 121,
      "metric_name": "after_hours_actions",
      "baseline_mean": "47.44",
      "baseline_stddev": "3.90",
      "deviation": "-5.00",
      "metric_value": "42.44",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 506,
    "fields": {
      "baseline": 106,
      "metric_name": "after_hours_actions",
      "baseline_mean": "48.16",
      "baseline_stddev": "3.58",
      "deviation": "-2.67",
      "metric_value": "45.49",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 507,
    "fields": {
      "baseline": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "25.55",
      "baseline_stddev": "6.65",
      "deviation": "2.92",
      "metric_value": "28.47",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 508,
    "fields": {
      "baseline": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.03",
      "baseline_stddev": "8.20",
      "deviation": "7.67",
      "metric_value": "48.70",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 509,
    "fields": {
      "baseline": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": "31.24",
      "baseline_stddev": "3.60",
      "deviation": "2.64",
      "metric_value": "33.88",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 510,
    "fields": {
      "baseline": 82,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.14",
      "baseline_stddev": "4.45",
      "deviation": "-14.92",
      "metric_value": "20.22",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 511,
    "fields": {
      "baseline": 12,
      "metric_name": "privileged_commands",
      "baseline_mean": "44.31",
      "baseline_stddev": "6.55",
      "deviation": "1.60",
      "metric_value": "45.91",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 512,
    "fields": {
      "baseline": 60,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.83",
      "baseline_stddev": "3.27",
      "deviation": "1.16",
      "metric_value": "48.99",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 513,
    "fields": {
      "baseline": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": "53.84",
      "baseline_stddev": "5.26",
      "deviation": "-9.07",
      "metric_value": "44.77",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 514,
    "fields": {
      "baseline": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": "48.48",
      "baseline_stddev": "5.35",
      "deviation": "-6.18",
      "metric_value": "42.30",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 515,
    "fields": {
      "baseline": 92,
      "metric_name": "privileged_commands",
      "baseline_mean": "42.06",
      "baseline_stddev": "5.96",
      "deviation": "-9.28",
      "metric_value": "32.78",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 516,
    "fields": {
      "baseline": 23,
      "metric_name": "failed_authentications",
      "baseline_mean": "32.70",
      "baseline_stddev": "8.92",
      "deviation": "5.32",
      "metric_value": "38.02",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 517,
    "fields": {
      "baseline": 27,
      "metric_name": "after_hours_actions",
      "baseline_mean": "28.42",
      "baseline_stddev": "7.59",
      "deviation": "6.88",
      "metric_value": "35.30",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 518,
    "fields": {
      "baseline": 118,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "39.43",
      "baseline_stddev": "5.98",
      "deviation": "2.19",
      "metric_value": "41.62",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 519,
    "fields": {
      "baseline": 74,
      "metric_name": "after_hours_actions",
      "baseline_mean": "49.44",
      "baseline_stddev": "3.24",
      "deviation": "4.73",
      "metric_value": "54.17",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 520,
    "fields": {
      "baseline": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "51.31",
      "baseline_stddev": "5.50",
      "deviation": "-0.72",
      "metric_value": "50.59",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 521,
    "fields": {
      "baseline": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.74",
      "baseline_stddev": "3.99",
      "deviation": "2.51",
      "metric_value": "38.25",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 522,
    "fields": {
      "baseline": 142,
      "metric_name": "failed_authentications",
      "baseline_mean": "37.68",
      "baseline_stddev": "6.37",
      "deviation": "2.73",
      "metric_value": "40.41",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 523,
    "fields": {
      "baseline": 23,
      "metric_name": "failed_authentications",
      "baseline_mean": "32.70",
      "baseline_stddev": "8.92",
      "deviation": "-9.71",
      "metric_value": "22.99",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 524,
    "fields": {
      "baseline": 50,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "49.01",
      "baseline_stddev": "6.94",
      "deviation": "-12.75",
      "metric_value": "36.26",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 525,
    "fields": {
      "baseline": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.14",
      "baseline_stddev": "3.69",
      "deviation": "1.73",
      "metric_value": "48.87",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 526,
    "fields": {
      "baseline": 99,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "27.83",
      "baseline_stddev": "3.59",
      "deviation": "1.50",
      "metric_value": "29.33",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 527,
    "fields": {
      "baseline": 41,
      "metric_name": "privileged_commands",
      "baseline_mean": "32.62",
      "baseline_stddev": "7.61",
      "deviation": "-2.66",
      "metric_value": "29.96",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 528,
    "fields": {
      "baseline": 105,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "36.37",
      "baseline_stddev": "7.35",
      "deviation": "3.03",
      "metric_value": "39.40",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 529,
    "fields": {
      "baseline": 50,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "49.01",
      "baseline_stddev": "6.94",
      "deviation": "0.11",
      "metric_value": "49.12",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 530,
    "fields": {
      "baseline": 57,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "45.61",
      "baseline_stddev": "5.33",
      "deviation": "-5.14",
      "metric_value": "40.47",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 531,
    "fields": {
      "baseline": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": "35.15",
      "baseline_stddev": "3.71",
      "deviation": "1.67",
      "metric_value": "36.82",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 532,
    "fields": {
      "baseline": 5,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "22.54",
      "baseline_stddev": "5.73",
      "deviation": "15.10",
      "metric_value": "37.64",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 533,
    "fields": {
      "baseline": 16,
      "metric_name": "failed_authentications",
      "baseline_mean": "54.84",
      "baseline_stddev": "8.29",
      "deviation": "10.64",
      "metric_value": "65.48",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 534,
    "fields": {
      "baseline": 91,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "32.43",
      "baseline_stddev": "6.60",
      "deviation": "-6.70",
      "metric_value": "25.73",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 535,
    "fields": {
      "baseline": 9,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "26.84",
      "baseline_stddev": "3.25",
      "deviation": "2.02",
      "metric_value": "28.86",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 536,
    "fields": {
      "baseline": 87,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "37.79",
      "baseline_stddev": "7.87",
      "deviation": "-8.08",
      "metric_value": "29.71",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 537,
    "fields": {
      "baseline": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "37.89",
      "baseline_stddev": "4.48",
      "deviation": "3.02",
      "metric_value": "40.91",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 538,
    "fields": {
      "baseline": 16,
      "metric_name": "failed_authentications",
      "baseline_mean": "54.84",
      "baseline_stddev": "8.29",
      "deviation": "22.41",
      "metric_value": "77.25",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 539,
    "fields": {
      "baseline": 81,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "29.58",
      "baseline_stddev": "7.02",
      "deviation": "-7.02",
      "metric_value": "22.56",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 540,
    "fields": {
      "baseline": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.89",
      "baseline_stddev": "8.41",
      "deviation": "5.80",
      "metric_value": "53.69",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 541,
    "fields": {
      "baseline": 82,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.14",
      "baseline_stddev": "4.45",
      "deviation": "-15.22",
      "metric_value": "19.92",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 542,
    "fields": {
      "baseline": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "36.23",
      "baseline_stddev": "6.56",
      "deviation": "0.15",
      "metric_value": "36.38",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 543,
    "fields": {
      "baseline": 62,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "34.58",
      "baseline_stddev": "4.26",
      "deviation": "-2.59",
      "metric_value": "31.99",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 544,
    "fields": {
      "baseline": 38,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.41",
      "baseline_stddev": "3.37",
      "deviation": "-2.40",
      "metric_value": "40.01",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 545,
    "fields": {
      "baseline": 42,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "46.25",
      "baseline_stddev": "3.74",
      "deviation": "0.11",
      "metric_value": "46.36",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 546,
    "fields": {
      "baseline": 141,
      "metric_name": "privileged_commands",
      "baseline_mean": "53.45",
      "baseline_stddev": "4.83",
      "deviation": "-0.72",
      "metric_value": "52.73",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 547,
    "fields": {
      "baseline": 93,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.09",
      "baseline_stddev": "4.82",
      "deviation": "-3.36",
      "metric_value": "31.73",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 548,
    "fields": {
      "baseline": 14,
      "metric_name": "privileged_commands",
      "baseline_mean": "46.78",
      "baseline_stddev": "5.64",
      "deviation": "9.43",
      "metric_value": "56.21",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 549,
    "fields": {
      "baseline": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.70",
      "baseline_stddev": "4.92",
      "deviation": "15.25",
      "metric_value": "56.95",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 550,
    "fields": {
      "baseline": 99,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "27.83",
      "baseline_stddev": "3.59",
      "deviation": "-0.76",
      "metric_value": "27.07",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 551,
    "fields": {
      "baseline": 67,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "48.61",
      "baseline_stddev": "4.64",
      "deviation": "6.73",
      "metric_value": "55.34",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 552,
    "fields": {
      "baseline": 128,
      "metric_name": "privileged_commands",
      "baseline_mean": "36.70",
      "baseline_stddev": "8.88",
      "deviation": "10.22",
      "metric_value": "46.92",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 553,
    "fields": {
      "baseline": 127,
      "metric_name": "privileged_commands",
      "baseline_mean": "39.14",
      "baseline_stddev": "5.90",
      "deviation": "-8.51",
      "metric_value": "30.63",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 554,
    "fields": {
      "baseline": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.51",
      "baseline_stddev": "5.20",
      "deviation": "-3.94",
      "metric_value": "28.57",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 555,
    "fields": {
      "baseline": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": "31.24",
      "baseline_stddev": "3.60",
      "deviation": "9.82",
      "metric_value": "41.06",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 556,
    "fields": {
      "baseline": 79,
      "metric_name": "after_hours_actions",
      "baseline_mean": "52.50",
      "baseline_stddev": "5.32",
      "deviation": "18.28",
      "metric_value": "70.78",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 557,
    "fields": {
      "baseline": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "28.93",
      "baseline_stddev": "5.95",
      "deviation": "-2.10",
      "metric_value": "26.83",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 558,
    "fields": {
      "baseline": 103,
      "metric_name": "privileged_commands",
      "baseline_mean": "34.81",
      "baseline_stddev": "6.22",
      "deviation": "11.44",
      "metric_value": "46.25",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 559,
    "fields": {
      "baseline": 99,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "27.83",
      "baseline_stddev": "3.59",
      "deviation": "9.78",
      "metric_value": "37.61",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 560,
    "fields": {
      "baseline": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.43",
      "baseline_stddev": "8.80",
      "deviation": "-5.79",
      "metric_value": "35.64",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 561,
    "fields": {
      "baseline": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.21",
      "baseline_stddev": "8.09",
      "deviation": "2.67",
      "metric_value": "43.88",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 562,
    "fields": {
      "baseline": 64,
      "metric_name": "privileged_commands",
      "baseline_mean": "35.69",
      "baseline_stddev": "7.14",
      "deviation": "6.30",
      "metric_value": "41.99",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 563,
    "fields": {
      "baseline": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": "61.90",
      "baseline_stddev": "3.17",
      "deviation": "4.92",
      "metric_value": "66.82",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 564,
    "fields": {
      "baseline": 45,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "32.31",
      "baseline_stddev": "3.18",
      "deviation": "7.06",
      "metric_value": "39.37",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 565,
    "fields": {
      "baseline": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": "34.63",
      "baseline_stddev": "4.07",
      "deviation": "5.54",
      "metric_value": "40.17",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 566,
    "fields": {
      "baseline": 20,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "25.44",
      "baseline_stddev": "7.26",
      "deviation": "-0.89",
      "metric_value": "24.55",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 567,
    "fields": {
      "baseline": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.73",
      "baseline_stddev": "7.79",
      "deviation": "7.63",
      "metric_value": "55.36",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 568,
    "fields": {
      "baseline": 93,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.09",
      "baseline_stddev": "4.82",
      "deviation": "7.60",
      "metric_value": "42.69",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 569,
    "fields": {
      "baseline": 81,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "29.58",
      "baseline_stddev": "7.02",
      "deviation": "-1.51",
      "metric_value": "28.07",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 570,
    "fields": {
      "baseline": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "48.60",
      "baseline_stddev": "7.36",
      "deviation": "-2.36",
      "metric_value": "46.24",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 571,
    "fields": {
      "baseline": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "25.55",
      "baseline_stddev": "6.65",
      "deviation": "3.11",
      "metric_value": "28.66",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 572,
    "fields": {
      "baseline": 20,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "25.44",
      "baseline_stddev": "7.26",
      "deviation": "3.81",
      "metric_value": "29.25",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 573,
    "fields": {
      "baseline": 97,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "31.22",
      "baseline_stddev": "7.04",
      "deviation": "19.16",
      "metric_value": "50.38",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 574,
    "fields": {
      "baseline": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.89",
      "baseline_stddev": "8.41",
      "deviation": "-15.60",
      "metric_value": "32.29",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 575,
    "fields": {
      "baseline": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": "38.01",
      "baseline_stddev": "7.08",
      "deviation": "0.23",
      "metric_value": "38.24",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 576,
    "fields": {
      "baseline": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.73",
      "baseline_stddev": "7.79",
      "deviation": "2.31",
      "metric_value": "50.04",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 577,
    "fields": {
      "baseline": 32,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "40.12",
      "baseline_stddev": "5.36",
      "deviation": "-1.01",
      "metric_value": "39.11",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 578,
    "fields": {
      "baseline": 35,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "36.56",
      "baseline_stddev": "6.43",
      "deviation": "-2.95",
      "metric_value": "33.61",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 579,
    "fields": {
      "baseline": 35,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "36.56",
      "baseline_stddev": "6.43",
      "deviation": "-4.53",
      "metric_value": "32.03",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 580,
    "fields": {
      "baseline": 101,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "52.70",
      "baseline_stddev": "8.21",
      "deviation": "-1.14",
      "metric_value": "51.56",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 581,
    "fields": {
      "baseline": 79,
      "metric_name": "after_hours_actions",
      "baseline_mean": "52.50",
      "baseline_stddev": "5.32",
      "deviation": "4.82",
      "metric_value": "57.32",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 582,
    "fields": {
      "baseline": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": "21.86",
      "baseline_stddev": "5.81",
      "deviation": "-8.30",
      "metric_value": "13.56",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 583,
    "fields": {
      "baseline": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "25.55",
      "baseline_stddev": "6.65",
      "deviation": "2.09",
      "metric_value": "27.64",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 584,
    "fields": {
      "baseline": 55,
      "metric_name": "failed_authentications",
      "baseline_mean": "37.02",
      "baseline_stddev": "4.74",
      "deviation": "-7.54",
      "metric_value": "29.48",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 585,
    "fields": {
      "baseline": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": "31.24",
      "baseline_stddev": "3.60",
      "deviation": "-12.27",
      "metric_value": "18.97",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 586,
    "fields": {
      "baseline": 45,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "32.31",
      "baseline_stddev": "3.18",
      "deviation": "2.73",
      "metric_value": "35.04",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 587,
    "fields": {
      "baseline": 37,
      "metric_name": "privileged_commands",
      "baseline_mean": "41.39",
      "baseline_stddev": "5.66",
      "deviation": "-0.01",
      "metric_value": "41.38",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 588,
    "fields": {
      "baseline": 48,
      "metric_name": "failed_authentications",
      "baseline_mean": "48.10",
      "baseline_stddev": "7.35",
      "deviation": "1.92",
      "metric_value": "50.02",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 589,
    "fields": {
      "baseline": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.51",
      "baseline_stddev": "5.20",
      "deviation": "-3.00",
      "metric_value": "29.51",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 590,
    "fields": {
      "baseline": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "28.93",
      "baseline_stddev": "5.95",
      "deviation": "0.54",
      "metric_value": "29.47",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 591,
    "fields": {
      "baseline": 123,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "32.39",
      "baseline_stddev": "6.06",
      "deviation": "-9.24",
      "metric_value": "23.15",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 592,
    "fields": {
      "baseline": 122,
      "metric_name": "after_hours_actions",
      "baseline_mean": "34.55",
      "baseline_stddev": "8.23",
      "deviation": "-3.09",
      "metric_value": "31.46",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 593,
    "fields": {
      "baseline": 65,
      "metric_name": "after_hours_actions",
      "baseline_mean": "47.99",
      "baseline_stddev": "3.71",
      "deviation": "-6.76",
      "metric_value": "41.23",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 594,
    "fields": {
      "baseline": 107,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.93",
      "baseline_stddev": "7.64",
      "deviation": "4.17",
      "metric_value": "57.10",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 595,
    "fields": {
      "baseline": 143,
      "metric_name": "after_hours_actions",
      "baseline_mean": "42.06",
      "baseline_stddev": "4.27",
      "deviation": "7.96",
      "metric_value": "50.02",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 596,
    "fields": {
      "baseline": 1,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "46.46",
      "baseline_stddev": "3.55",
      "deviation": "-4.97",
      "metric_value": "41.49",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 597,
    "fields": {
      "baseline": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.74",
      "baseline_stddev": "3.99",
      "deviation": "-0.43",
      "metric_value": "35.31",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 598,
    "fields": {
      "baseline": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": "21.86",
      "baseline_stddev": "5.81",
      "deviation": "13.74",
      "metric_value": "35.60",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 599,
    "fields": {
      "baseline": 88,
      "metric_name": "privileged_commands",
      "baseline_mean": "21.65",
      "baseline_stddev": "5.31",
      "deviation": "-0.51",
      "metric_value": "21.14",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 600,
    "fields": {
      "baseline": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": "37.96",
      "baseline_stddev": "4.69",
      "deviation": "2.53",
      "metric_value": "40.49",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 601,
    "fields": {
      "baseline": 140,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.16",
      "baseline_stddev": "5.98",
      "deviation": "2.51",
      "metric_value": "54.67",
      "observed_on": "2025-05-01"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 602,
    "fields": {
      "baseline": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": "31.24",
      "baseline_stddev": "3.60",
      "deviation": "14.11",
      "metric_value": "45.35",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 603,
    "fields": {
      "baseline": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.70",
      "baseline_stddev": "4.92",
      "deviation": "3.44",
      "metric_value": "45.14",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 604,
    "fields": {
      "baseline": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.70",
      "baseline_stddev": "4.92",
      "deviation": "-2.57",
      "metric_value": "39.13",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 605,
    "fields": {
      "baseline": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "33.73",
      "baseline_stddev": "4.64",
      "deviation": "3.68",
      "metric_value": "37.41",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 606,
    "fields": {
      "baseline": 27,
      "metric_name": "after_hours_actions",
      "baseline_mean": "28.42",
      "baseline_stddev": "7.59",
      "deviation": "7.74",
      "metric_value": "36.16",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 607,
    "fields": {
      "baseline": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": "24.25",
      "baseline_stddev": "3.09",
      "deviation": "-1.22",
      "metric_value": "23.03",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 608,
    "fields": {
      "baseline": 115,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "19.80",
      "baseline_stddev": "4.17",
      "deviation": "-0.25",
      "metric_value": "19.55",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 609,
    "fields": {
      "baseline": 66,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "33.35",
      "baseline_stddev": "3.50",
      "deviation": "-2.11",
      "metric_value": "31.24",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 610,
    "fields": {
      "baseline": 10,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.61",
      "baseline_stddev": "5.85",
      "deviation": "-2.28",
      "metric_value": "40.33",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 611,
    "fields": {
      "baseline": 89,
      "metric_name": "after_hours_actions",
      "baseline_mean": "33.27",
      "baseline_stddev": "3.00",
      "deviation": "1.93",
      "metric_value": "35.20",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 612,
    "fields": {
      "baseline": 104,
      "metric_name": "after_hours_actions",
      "baseline_mean": "27.59",
      "baseline_stddev": "8.27",
      "deviation": "0.63",
      "metric_value": "28.22",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 613,
    "fields": {
      "baseline": 92,
      "metric_name": "privileged_commands",
      "baseline_mean": "42.06",
      "baseline_stddev": "5.96",
      "deviation": "-5.18",
      "metric_value": "36.88",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 614,
    "fields": {
      "baseline": 2,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.77",
      "baseline_stddev": "8.91",
      "deviation": "1.58",
      "metric_value": "49.35",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 615,
    "fields": {
      "baseline": 37,
      "metric_name": "privileged_commands",
      "baseline_mean": "41.39",
      "baseline_stddev": "5.66",
      "deviation": "-2.97",
      "metric_value": "38.42",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 616,
    "fields": {
      "baseline": 18,
      "metric_name": "failed_authentications",
      "baseline_mean": "39.22",
      "baseline_stddev": "4.32",
      "deviation": "-3.59",
      "metric_value": "35.63",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 617,
    "fields": {
      "baseline": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.43",
      "baseline_stddev": "8.80",
      "deviation": "6.33",
      "metric_value": "47.76",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 618,
    "fields": {
      "baseline": 77,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "34.60",
      "baseline_stddev": "4.88",
      "deviation": "14.48",
      "metric_value": "49.08",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 619,
    "fields": {
      "baseline": 94,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "35.90",
      "baseline_stddev": "6.88",
      "deviation": "6.09",
      "metric_value": "41.99",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 620,
    "fields": {
      "baseline": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.43",
      "baseline_stddev": "8.80",
      "deviation": "-3.96",
      "metric_value": "37.47",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 621,
    "fields": {
      "baseline": 94,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "35.90",
      "baseline_stddev": "6.88",
      "deviation": "5.69",
      "metric_value": "41.59",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 622,
    "fields": {
      "baseline": 108,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.02",
      "baseline_stddev": "4.88",
      "deviation": "8.13",
      "metric_value": "60.15",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 623,
    "fields": {
      "baseline": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.14",
      "baseline_stddev": "3.69",
      "deviation": "-9.59",
      "metric_value": "37.55",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 624,
    "fields": {
      "baseline": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "33.73",
      "baseline_stddev": "4.64",
      "deviation": "0.07",
      "metric_value": "33.80",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 625,
    "fields": {
      "baseline": 89,
      "metric_name": "after_hours_actions",
      "baseline_mean": "33.27",
      "baseline_stddev": "3.00",
      "deviation": "-11.12",
      "metric_value": "22.15",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 626,
    "fields": {
      "baseline": 140,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.16",
      "baseline_stddev": "5.98",
      "deviation": "0.62",
      "metric_value": "52.78",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 627,
    "fields": {
      "baseline": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": "53.84",
      "baseline_stddev": "5.26",
      "deviation": "-14.01",
      "metric_value": "39.83",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 628,
    "fields": {
      "baseline": 11,
      "metric_name": "privileged_commands",
      "baseline_mean": "41.52",
      "baseline_stddev": "3.02",
      "deviation": "-19.52",
      "metric_value": "22.00",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 629,
    "fields": {
      "baseline": 25,
      "metric_name": "after_hours_actions",
      "baseline_mean": "43.96",
      "baseline_stddev": "4.00",
      "deviation": "12.66",
      "metric_value": "56.62",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 630,
    "fields": {
      "baseline": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.43",
      "baseline_stddev": "8.80",
      "deviation": "-14.32",
      "metric_value": "27.11",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 631,
    "fields": {
      "baseline": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": "30.46",
      "baseline_stddev": "4.78",
      "deviation": "8.68",
      "metric_value": "39.14",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 632,
    "fields": {
      "baseline": 75,
      "metric_name": "privileged_commands",
      "baseline_mean": "22.05",
      "baseline_stddev": "6.18",
      "deviation": "-9.58",
      "metric_value": "12.47",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 633,
    "fields": {
      "baseline": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": "21.86",
      "baseline_stddev": "5.81",
      "deviation": "-2.22",
      "metric_value": "19.64",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 634,
    "fields": {
      "baseline": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": "38.27",
      "baseline_stddev": "3.29",
      "deviation": "-7.38",
      "metric_value": "30.89",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 635,
    "fields": {
      "baseline": 45,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "32.31",
      "baseline_stddev": "3.18",
      "deviation": "5.13",
      "metric_value": "37.44",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 636,
    "fields": {
      "baseline": 43,
      "metric_name": "after_hours_actions",
      "baseline_mean": "39.67",
      "baseline_stddev": "8.45",
      "deviation": "11.57",
      "metric_value": "51.24",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 637,
    "fields": {
      "baseline": 127,
      "metric_name": "privileged_commands",
      "baseline_mean": "39.14",
      "baseline_stddev": "5.90",
      "deviation": "-7.88",
      "metric_value": "31.26",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 638,
    "fields": {
      "baseline": 17,
      "metric_name": "failed_authentications",
      "baseline_mean": "48.00",
      "baseline_stddev": "7.45",
      "deviation": "1.03",
      "metric_value": "49.03",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 639,
    "fields": {
      "baseline": 77,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "34.60",
      "baseline_stddev": "4.88",
      "deviation": "-3.89",
      "metric_value": "30.71",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 640,
    "fields": {
      "baseline": 107,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.93",
      "baseline_stddev": "7.64",
      "deviation": "5.64",
      "metric_value": "58.57",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 641,
    "fields": {
      "baseline": 25,
      "metric_name": "after_hours_actions",
      "baseline_mean": "43.96",
      "baseline_stddev": "4.00",
      "deviation": "2.24",
      "metric_value": "46.20",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 642,
    "fields": {
      "baseline": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.02",
      "baseline_stddev": "4.36",
      "deviation": "-6.27",
      "metric_value": "27.75",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 643,
    "fields": {
      "baseline": 131,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.94",
      "baseline_stddev": "3.32",
      "deviation": "-9.61",
      "metric_value": "32.33",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 644,
    "fields": {
      "baseline": 63,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "31.54",
      "baseline_stddev": "8.17",
      "deviation": "-8.28",
      "metric_value": "23.26",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 645,
    "fields": {
      "baseline": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": "61.90",
      "baseline_stddev": "3.17",
      "deviation": "6.09",
      "metric_value": "67.99",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 646,
    "fields": {
      "baseline": 117,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "31.93",
      "baseline_stddev": "6.91",
      "deviation": "-7.59",
      "metric_value": "24.34",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 647,
    "fields": {
      "baseline": 91,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "32.43",
      "baseline_stddev": "6.60",
      "deviation": "21.68",
      "metric_value": "54.11",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 648,
    "fields": {
      "baseline": 3,
      "metric_name": "failed_authentications",
      "baseline_mean": "54.01",
      "baseline_stddev": "8.84",
      "deviation": "-6.06",
      "metric_value": "47.95",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 649,
    "fields": {
      "baseline": 87,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "37.79",
      "baseline_stddev": "7.87",
      "deviation": "-6.06",
      "metric_value": "31.73",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 650,
    "fields": {
      "baseline": 26,
      "metric_name": "after_hours_actions",
      "baseline_mean": "16.89",
      "baseline_stddev": "7.02",
      "deviation": "-4.76",
      "metric_value": "12.13",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 651,
    "fields": {
      "baseline": 118,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "39.43",
      "baseline_stddev": "5.98",
      "deviation": "-2.65",
      "metric_value": "36.78",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 652,
    "fields": {
      "baseline": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": "46.49",
      "baseline_stddev": "3.50",
      "deviation": "-1.70",
      "metric_value": "44.79",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 653,
    "fields": {
      "baseline": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": "38.27",
      "baseline_stddev": "3.29",
      "deviation": "-2.24",
      "metric_value": "36.03",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 654,
    "fields": {
      "baseline": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "55.56",
      "baseline_stddev": "8.65",
      "deviation": "-0.83",
      "metric_value": "54.73",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 655,
    "fields": {
      "baseline": 92,
      "metric_name": "privileged_commands",
      "baseline_mean": "42.06",
      "baseline_stddev": "5.96",
      "deviation": "4.51",
      "metric_value": "46.57",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 656,
    "fields": {
      "baseline": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "37.89",
      "baseline_stddev": "4.48",
      "deviation": "3.72",
      "metric_value": "41.61",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 657,
    "fields": {
      "baseline": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "27.30",
      "baseline_stddev": "6.75",
      "deviation": "-0.45",
      "metric_value": "26.85",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 658,
    "fields": {
      "baseline": 103,
      "metric_name": "privileged_commands",
      "baseline_mean": "34.81",
      "baseline_stddev": "6.22",
      "deviation": "6.20",
      "metric_value": "41.01",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 659,
    "fields": {
      "baseline": 12,
      "metric_name": "privileged_commands",
      "baseline_mean": "44.31",
      "baseline_stddev": "6.55",
      "deviation": "10.06",
      "metric_value": "54.37",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 660,
    "fields": {
      "baseline": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.21",
      "baseline_stddev": "8.09",
      "deviation": "9.94",
      "metric_value": "51.15",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 661,
    "fields": {
      "baseline": 23,
      "metric_name": "failed_authentications",
      "baseline_mean": "32.70",
      "baseline_stddev": "8.92",
      "deviation": "-2.83",
      "metric_value": "29.87",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 662,
    "fields": {
      "baseline": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": "35.15",
      "baseline_stddev": "3.71",
      "deviation": "10.76",
      "metric_value": "45.91",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 663,
    "fields": {
      "baseline": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": "37.96",
      "baseline_stddev": "4.69",
      "deviation": "2.52",
      "metric_value": "40.48",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 664,
    "fields": {
      "baseline": 49,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "37.40",
      "baseline_stddev": "4.51",
      "deviation": "-1.12",
      "metric_value": "36.28",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 665,
    "fields": {
      "baseline": 55,
      "metric_name": "failed_authentications",
      "baseline_mean": "37.02",
      "baseline_stddev": "4.74",
      "deviation": "-11.21",
      "metric_value": "25.81",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 666,
    "fields": {
      "baseline": 42,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "46.25",
      "baseline_stddev": "3.74",
      "deviation": "0.69",
      "metric_value": "46.94",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 667,
    "fields": {
      "baseline": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "25.55",
      "baseline_stddev": "6.65",
      "deviation": "3.37",
      "metric_value": "28.92",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 668,
    "fields": {
      "baseline": 27,
      "metric_name": "after_hours_actions",
      "baseline_mean": "28.42",
      "baseline_stddev": "7.59",
      "deviation": "1.54",
      "metric_value": "29.96",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 669,
    "fields": {
      "baseline": 14,
      "metric_name": "privileged_commands",
      "baseline_mean": "46.78",
      "baseline_stddev": "5.64",
      "deviation": "-4.94",
      "metric_value": "41.84",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 670,
    "fields": {
      "baseline": 115,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "19.80",
      "baseline_stddev": "4.17",
      "deviation": "-4.65",
      "metric_value": "15.15",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 671,
    "fields": {
      "baseline": 6,
      "metric_name": "failed_authentications",
      "baseline_mean": "32.76",
      "baseline_stddev": "4.46",
      "deviation": "-8.96",
      "metric_value": "23.80",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 672,
    "fields": {
      "baseline": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "37.89",
      "baseline_stddev": "4.48",
      "deviation": "11.24",
      "metric_value": "49.13",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 673,
    "fields": {
      "baseline": 48,
      "metric_name": "failed_authentications",
      "baseline_mean": "48.10",
      "baseline_stddev": "7.35",
      "deviation": "-0.80",
      "metric_value": "47.30",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 674,
    "fields": {
      "baseline": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "27.75",
      "baseline_stddev": "4.70",
      "deviation": "1.98",
      "metric_value": "29.73",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 675,
    "fields": {
      "baseline": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": "48.48",
      "baseline_stddev": "5.35",
      "deviation": "-7.33",
      "metric_value": "41.15",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 676,
    "fields": {
      "baseline": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": "48.48",
      "baseline_stddev": "5.35",
      "deviation": "-14.98",
      "metric_value": "33.50",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 677,
    "fields": {
      "baseline": 6,
      "metric_name": "failed_authentications",
      "baseline_mean": "32.76",
      "baseline_stddev": "4.46",
      "deviation": "4.15",
      "metric_value": "36.91",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 678,
    "fields": {
      "baseline": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "27.30",
      "baseline_stddev": "6.75",
      "deviation": "-1.10",
      "metric_value": "26.20",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 679,
    "fields": {
      "baseline": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.03",
      "baseline_stddev": "8.20",
      "deviation": "-1.30",
      "metric_value": "39.73",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 680,
    "fields": {
      "baseline": 106,
      "metric_name": "after_hours_actions",
      "baseline_mean": "48.16",
      "baseline_stddev": "3.58",
      "deviation": "4.53",
      "metric_value": "52.69",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 681,
    "fields": {
      "baseline": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": "37.96",
      "baseline_stddev": "4.69",
      "deviation": "9.28",
      "metric_value": "47.24",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 682,
    "fields": {
      "baseline": 18,
      "metric_name": "failed_authentications",
      "baseline_mean": "39.22",
      "baseline_stddev": "4.32",
      "deviation": "-8.03",
      "metric_value": "31.19",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 683,
    "fields": {
      "baseline": 48,
      "metric_name": "failed_authentications",
      "baseline_mean": "48.10",
      "baseline_stddev": "7.35",
      "deviation": "22.22",
      "metric_value": "70.32",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 684,
    "fields": {
      "baseline": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": "34.63",
      "baseline_stddev": "4.07",
      "deviation": "5.81",
      "metric_value": "40.44",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 685,
    "fields": {
      "baseline": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.74",
      "baseline_stddev": "3.99",
      "deviation": "-8.97",
      "metric_value": "26.77",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 686,
    "fields": {
      "baseline": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": "40.23",
      "baseline_stddev": "3.26",
      "deviation": "-6.08",
      "metric_value": "34.15",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 687,
    "fields": {
      "baseline": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": "40.23",
      "baseline_stddev": "3.26",
      "deviation": "-1.90",
      "metric_value": "38.33",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 688,
    "fields": {
      "baseline": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.02",
      "baseline_stddev": "4.36",
      "deviation": "-6.02",
      "metric_value": "28.00",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 689,
    "fields": {
      "baseline": 24,
      "metric_name": "privileged_commands",
      "baseline_mean": "50.31",
      "baseline_stddev": "4.67",
      "deviation": "7.59",
      "metric_value": "57.90",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 690,
    "fields": {
      "baseline": 24,
      "metric_name": "privileged_commands",
      "baseline_mean": "50.31",
      "baseline_stddev": "4.67",
      "deviation": "8.12",
      "metric_value": "58.43",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 691,
    "fields": {
      "baseline": 102,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "25.02",
      "baseline_stddev": "3.88",
      "deviation": "5.21",
      "metric_value": "30.23",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 692,
    "fields": {
      "baseline": 66,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "33.35",
      "baseline_stddev": "3.50",
      "deviation": "0.62",
      "metric_value": "33.97",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 693,
    "fields": {
      "baseline": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.17",
      "baseline_stddev": "3.53",
      "deviation": "-6.10",
      "metric_value": "28.07",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 694,
    "fields": {
      "baseline": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.73",
      "baseline_stddev": "7.79",
      "deviation": "-2.23",
      "metric_value": "45.50",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 695,
    "fields": {
      "baseline": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "25.55",
      "baseline_stddev": "6.65",
      "deviation": "-4.94",
      "metric_value": "20.61",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 696,
    "fields": {
      "baseline": 37,
      "metric_name": "privileged_commands",
      "baseline_mean": "41.39",
      "baseline_stddev": "5.66",
      "deviation": "7.94",
      "metric_value": "49.33",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 697,
    "fields": {
      "baseline": 24,
      "metric_name": "privileged_commands",
      "baseline_mean": "50.31",
      "baseline_stddev": "4.67",
      "deviation": "-1.88",
      "metric_value": "48.43",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 698,
    "fields": {
      "baseline": 96,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "55.62",
      "baseline_stddev": "4.46",
      "deviation": "2.27",
      "metric_value": "57.89",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 699,
    "fields": {
      "baseline": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": "38.01",
      "baseline_stddev": "7.08",
      "deviation": "2.81",
      "metric_value": "40.82",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 700,
    "fields": {
      "baseline": 47,
      "metric_name": "after_hours_actions",
      "baseline_mean": "37.08",
      "baseline_stddev": "5.21",
      "deviation": "-7.93",
      "metric_value": "29.15",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 701,
    "fields": {
      "baseline": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": "33.82",
      "baseline_stddev": "6.10",
      "deviation": "2.93",
      "metric_value": "36.75",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 702,
    "fields": {
      "baseline": 76,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "48.32",
      "baseline_stddev": "5.99",
      "deviation": "5.09",
      "metric_value": "53.41",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 703,
    "fields": {
      "baseline": 76,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "48.32",
      "baseline_stddev": "5.99",
      "deviation": "2.32",
      "metric_value": "50.64",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 704,
    "fields": {
      "baseline": 29,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.00",
      "baseline_stddev": "4.99",
      "deviation": "-9.33",
      "metric_value": "42.67",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 705,
    "fields": {
      "baseline": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "27.75",
      "baseline_stddev": "4.70",
      "deviation": "-4.52",
      "metric_value": "23.23",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 706,
    "fields": {
      "baseline": 106,
      "metric_name": "after_hours_actions",
      "baseline_mean": "48.16",
      "baseline_stddev": "3.58",
      "deviation": "3.27",
      "metric_value": "51.43",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 707,
    "fields": {
      "baseline": 7,
      "metric_name": "privileged_commands",
      "baseline_mean": "28.55",
      "baseline_stddev": "7.85",
      "deviation": "-4.78",
      "metric_value": "23.77",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 708,
    "fields": {
      "baseline": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": "31.24",
      "baseline_stddev": "3.60",
      "deviation": "2.09",
      "metric_value": "33.33",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 709,
    "fields": {
      "baseline": 2,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.77",
      "baseline_stddev": "8.91",
      "deviation": "-1.12",
      "metric_value": "46.65",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 710,
    "fields": {
      "baseline": 128,
      "metric_name": "privileged_commands",
      "baseline_mean": "36.70",
      "baseline_stddev": "8.88",
      "deviation": "-3.85",
      "metric_value": "32.85",
      "observed_on": "2025-05-02"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 711,
    "fields": {
      "baseline": 101,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "52.70",
      "baseline_stddev": "8.21",
      "deviation": "0.32",
      "metric_value": "53.02",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 712,
    "fields": {
      "baseline": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": "24.25",
      "baseline_stddev": "3.09",
      "deviation": "2.63",
      "metric_value": "26.88",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 713,
    "fields": {
      "baseline": 41,
      "metric_name": "privileged_commands",
      "baseline_mean": "32.62",
      "baseline_stddev": "7.61",
      "deviation": "7.23",
      "metric_value": "39.85",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 714,
    "fields": {
      "baseline": 121,
      "metric_name": "after_hours_actions",
      "baseline_mean": "47.44",
      "baseline_stddev": "3.90",
      "deviation": "-9.39",
      "metric_value": "38.05",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 715,
    "fields": {
      "baseline": 117,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "31.93",
      "baseline_stddev": "6.91",
      "deviation": "1.50",
      "metric_value": "33.43",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 716,
    "fields": {
      "baseline": 134,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.29",
      "baseline_stddev": "7.94",
      "deviation": "3.79",
      "metric_value": "51.08",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 717,
    "fields": {
      "baseline": 134,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.29",
      "baseline_stddev": "7.94",
      "deviation": "2.07",
      "metric_value": "49.36",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 718,
    "fields": {
      "baseline": 118,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "39.43",
      "baseline_stddev": "5.98",
      "deviation": "-0.62",
      "metric_value": "38.81",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 719,
    "fields": {
      "baseline": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.22",
      "baseline_stddev": "4.98",
      "deviation": "-5.50",
      "metric_value": "36.72",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 720,
    "fields": {
      "baseline": 50,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "49.01",
      "baseline_stddev": "6.94",
      "deviation": "-3.63",
      "metric_value": "45.38",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 721,
    "fields": {
      "baseline": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": "63.56",
      "baseline_stddev": "7.66",
      "deviation": "-2.90",
      "metric_value": "60.66",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 722,
    "fields": {
      "baseline": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "38.29",
      "baseline_stddev": "4.56",
      "deviation": "2.71",
      "metric_value": "41.00",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 723,
    "fields": {
      "baseline": 26,
      "metric_name": "after_hours_actions",
      "baseline_mean": "16.89",
      "baseline_stddev": "7.02",
      "deviation": "-4.28",
      "metric_value": "12.61",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 724,
    "fields": {
      "baseline": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "27.75",
      "baseline_stddev": "4.70",
      "deviation": "-11.29",
      "metric_value": "16.46",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 725,
    "fields": {
      "baseline": 81,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "29.58",
      "baseline_stddev": "7.02",
      "deviation": "10.08",
      "metric_value": "39.66",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 726,
    "fields": {
      "baseline": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.14",
      "baseline_stddev": "3.69",
      "deviation": "-7.34",
      "metric_value": "39.80",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 727,
    "fields": {
      "baseline": 1,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "46.46",
      "baseline_stddev": "3.55",
      "deviation": "-10.06",
      "metric_value": "36.40",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 728,
    "fields": {
      "baseline": 122,
      "metric_name": "after_hours_actions",
      "baseline_mean": "34.55",
      "baseline_stddev": "8.23",
      "deviation": "1.27",
      "metric_value": "35.82",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 729,
    "fields": {
      "baseline": 103,
      "metric_name": "privileged_commands",
      "baseline_mean": "34.81",
      "baseline_stddev": "6.22",
      "deviation": "-5.43",
      "metric_value": "29.38",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 730,
    "fields": {
      "baseline": 74,
      "metric_name": "after_hours_actions",
      "baseline_mean": "49.44",
      "baseline_stddev": "3.24",
      "deviation": "-5.44",
      "metric_value": "44.00",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 731,
    "fields": {
      "baseline": 27,
      "metric_name": "after_hours_actions",
      "baseline_mean": "28.42",
      "baseline_stddev": "7.59",
      "deviation": "-9.52",
      "metric_value": "18.90",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 732,
    "fields": {
      "baseline": 44,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "59.76",
      "baseline_stddev": "4.32",
      "deviation": "1.61",
      "metric_value": "61.37",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 733,
    "fields": {
      "baseline": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": "63.56",
      "baseline_stddev": "7.66",
      "deviation": "8.99",
      "metric_value": "72.55",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 734,
    "fields": {
      "baseline": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "51.31",
      "baseline_stddev": "5.50",
      "deviation": "11.90",
      "metric_value": "63.21",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 735,
    "fields": {
      "baseline": 60,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.83",
      "baseline_stddev": "3.27",
      "deviation": "9.14",
      "metric_value": "56.97",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 736,
    "fields": {
      "baseline": 16,
      "metric_name": "failed_authentications",
      "baseline_mean": "54.84",
      "baseline_stddev": "8.29",
      "deviation": "3.77",
      "metric_value": "58.61",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 737,
    "fields": {
      "baseline": 23,
      "metric_name": "failed_authentications",
      "baseline_mean": "32.70",
      "baseline_stddev": "8.92",
      "deviation": "-6.92",
      "metric_value": "25.78",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 738,
    "fields": {
      "baseline": 99,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "27.83",
      "baseline_stddev": "3.59",
      "deviation": "-5.14",
      "metric_value": "22.69",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 739,
    "fields": {
      "baseline": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.73",
      "baseline_stddev": "7.79",
      "deviation": "18.82",
      "metric_value": "66.55",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 740,
    "fields": {
      "baseline": 6,
      "metric_name": "failed_authentications",
      "baseline_mean": "32.76",
      "baseline_stddev": "4.46",
      "deviation": "-10.84",
      "metric_value": "21.92",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 741,
    "fields": {
      "baseline": 17,
      "metric_name": "failed_authentications",
      "baseline_mean": "48.00",
      "baseline_stddev": "7.45",
      "deviation": "-2.34",
      "metric_value": "45.66",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 742,
    "fields": {
      "baseline": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": "33.82",
      "baseline_stddev": "6.10",
      "deviation": "1.97",
      "metric_value": "35.79",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 743,
    "fields": {
      "baseline": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": "48.48",
      "baseline_stddev": "5.35",
      "deviation": "15.36",
      "metric_value": "63.84",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 744,
    "fields": {
      "baseline": 87,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "37.79",
      "baseline_stddev": "7.87",
      "deviation": "2.55",
      "metric_value": "40.34",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 745,
    "fields": {
      "baseline": 20,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "25.44",
      "baseline_stddev": "7.26",
      "deviation": "2.54",
      "metric_value": "27.98",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 746,
    "fields": {
      "baseline": 3,
      "metric_name": "failed_authentications",
      "baseline_mean": "54.01",
      "baseline_stddev": "8.84",
      "deviation": "1.99",
      "metric_value": "56.00",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 747,
    "fields": {
      "baseline": 63,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "31.54",
      "baseline_stddev": "8.17",
      "deviation": "-1.66",
      "metric_value": "29.88",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 748,
    "fields": {
      "baseline": 38,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.41",
      "baseline_stddev": "3.37",
      "deviation": "3.95",
      "metric_value": "46.36",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 749,
    "fields": {
      "baseline": 27,
      "metric_name": "after_hours_actions",
      "baseline_mean": "28.42",
      "baseline_stddev": "7.59",
      "deviation": "10.16",
      "metric_value": "38.58",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 750,
    "fields": {
      "baseline": 60,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.83",
      "baseline_stddev": "3.27",
      "deviation": "3.37",
      "metric_value": "51.20",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 751,
    "fields": {
      "baseline": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "36.23",
      "baseline_stddev": "6.56",
      "deviation": "6.30",
      "metric_value": "42.53",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 752,
    "fields": {
      "baseline": 20,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "25.44",
      "baseline_stddev": "7.26",
      "deviation": "2.98",
      "metric_value": "28.42",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 753,
    "fields": {
      "baseline": 87,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "37.79",
      "baseline_stddev": "7.87",
      "deviation": "1.65",
      "metric_value": "39.44",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 754,
    "fields": {
      "baseline": 45,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "32.31",
      "baseline_stddev": "3.18",
      "deviation": "-0.26",
      "metric_value": "32.05",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 755,
    "fields": {
      "baseline": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": "40.23",
      "baseline_stddev": "3.26",
      "deviation": "-0.02",
      "metric_value": "40.21",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 756,
    "fields": {
      "baseline": 136,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "33.91",
      "baseline_stddev": "6.69",
      "deviation": "3.60",
      "metric_value": "37.51",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 757,
    "fields": {
      "baseline": 10,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.61",
      "baseline_stddev": "5.85",
      "deviation": "0.49",
      "metric_value": "43.10",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 758,
    "fields": {
      "baseline": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.17",
      "baseline_stddev": "3.53",
      "deviation": "7.33",
      "metric_value": "41.50",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 759,
    "fields": {
      "baseline": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.21",
      "baseline_stddev": "8.09",
      "deviation": "-6.84",
      "metric_value": "34.37",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 760,
    "fields": {
      "baseline": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "42.87",
      "baseline_stddev": "5.14",
      "deviation": "-10.84",
      "metric_value": "32.03",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 761,
    "fields": {
      "baseline": 10,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.61",
      "baseline_stddev": "5.85",
      "deviation": "0.30",
      "metric_value": "42.91",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 762,
    "fields": {
      "baseline": 113,
      "metric_name": "after_hours_actions",
      "baseline_mean": "39.34",
      "baseline_stddev": "6.19",
      "deviation": "4.24",
      "metric_value": "43.58",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 763,
    "fields": {
      "baseline": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "51.31",
      "baseline_stddev": "5.50",
      "deviation": "-1.64",
      "metric_value": "49.67",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 764,
    "fields": {
      "baseline": 40,
      "metric_name": "after_hours_actions",
      "baseline_mean": "45.77",
      "baseline_stddev": "8.30",
      "deviation": "-3.77",
      "metric_value": "42.00",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 765,
    "fields": {
      "baseline": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": "21.86",
      "baseline_stddev": "5.81",
      "deviation": "0.88",
      "metric_value": "22.74",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 766,
    "fields": {
      "baseline": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "55.56",
      "baseline_stddev": "8.65",
      "deviation": "-2.76",
      "metric_value": "52.80",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 767,
    "fields": {
      "baseline": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": "63.56",
      "baseline_stddev": "7.66",
      "deviation": "-0.43",
      "metric_value": "63.13",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 768,
    "fields": {
      "baseline": 68,
      "metric_name": "failed_authentications",
      "baseline_mean": "33.67",
      "baseline_stddev": "8.84",
      "deviation": "10.52",
      "metric_value": "44.19",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 769,
    "fields": {
      "baseline": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.02",
      "baseline_stddev": "4.36",
      "deviation": "1.56",
      "metric_value": "35.58",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 770,
    "fields": {
      "baseline": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "30.32",
      "baseline_stddev": "5.52",
      "deviation": "-6.58",
      "metric_value": "23.74",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 771,
    "fields": {
      "baseline": 128,
      "metric_name": "privileged_commands",
      "baseline_mean": "36.70",
      "baseline_stddev": "8.88",
      "deviation": "4.06",
      "metric_value": "40.76",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 772,
    "fields": {
      "baseline": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": "37.96",
      "baseline_stddev": "4.69",
      "deviation": "4.38",
      "metric_value": "42.34",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 773,
    "fields": {
      "baseline": 118,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "39.43",
      "baseline_stddev": "5.98",
      "deviation": "-1.94",
      "metric_value": "37.49",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 774,
    "fields": {
      "baseline": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.03",
      "baseline_stddev": "8.20",
      "deviation": "5.50",
      "metric_value": "46.53",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 775,
    "fields": {
      "baseline": 115,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "19.80",
      "baseline_stddev": "4.17",
      "deviation": "2.86",
      "metric_value": "22.66",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 776,
    "fields": {
      "baseline": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "38.29",
      "baseline_stddev": "4.56",
      "deviation": "-7.63",
      "metric_value": "30.66",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 777,
    "fields": {
      "baseline": 97,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "31.22",
      "baseline_stddev": "7.04",
      "deviation": "5.45",
      "metric_value": "36.67",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 778,
    "fields": {
      "baseline": 91,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "32.43",
      "baseline_stddev": "6.60",
      "deviation": "-11.45",
      "metric_value": "20.98",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 779,
    "fields": {
      "baseline": 19,
      "metric_name": "after_hours_actions",
      "baseline_mean": "52.60",
      "baseline_stddev": "3.78",
      "deviation": "0.34",
      "metric_value": "52.94",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 780,
    "fields": {
      "baseline": 117,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "31.93",
      "baseline_stddev": "6.91",
      "deviation": "-0.64",
      "metric_value": "31.29",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 781,
    "fields": {
      "baseline": 4,
      "metric_name": "privileged_commands",
      "baseline_mean": "27.18",
      "baseline_stddev": "6.73",
      "deviation": "11.83",
      "metric_value": "39.01",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 782,
    "fields": {
      "baseline": 7,
      "metric_name": "privileged_commands",
      "baseline_mean": "28.55",
      "baseline_stddev": "7.85",
      "deviation": "0.27",
      "metric_value": "28.82",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 783,
    "fields": {
      "baseline": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": "53.84",
      "baseline_stddev": "5.26",
      "deviation": "10.50",
      "metric_value": "64.34",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 784,
    "fields": {
      "baseline": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "42.87",
      "baseline_stddev": "5.14",
      "deviation": "-5.61",
      "metric_value": "37.26",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 785,
    "fields": {
      "baseline": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.14",
      "baseline_stddev": "3.69",
      "deviation": "-13.40",
      "metric_value": "33.74",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 786,
    "fields": {
      "baseline": 130,
      "metric_name": "failed_authentications",
      "baseline_mean": "46.54",
      "baseline_stddev": "5.21",
      "deviation": "9.98",
      "metric_value": "56.52",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 787,
    "fields": {
      "baseline": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.89",
      "baseline_stddev": "5.26",
      "deviation": "6.82",
      "metric_value": "39.71",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 788,
    "fields": {
      "baseline": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": "21.86",
      "baseline_stddev": "5.81",
      "deviation": "4.07",
      "metric_value": "25.93",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 789,
    "fields": {
      "baseline": 40,
      "metric_name": "after_hours_actions",
      "baseline_mean": "45.77",
      "baseline_stddev": "8.30",
      "deviation": "-11.19",
      "metric_value": "34.58",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 790,
    "fields": {
      "baseline": 11,
      "metric_name": "privileged_commands",
      "baseline_mean": "41.52",
      "baseline_stddev": "3.02",
      "deviation": "-4.15",
      "metric_value": "37.37",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 791,
    "fields": {
      "baseline": 14,
      "metric_name": "privileged_commands",
      "baseline_mean": "46.78",
      "baseline_stddev": "5.64",
      "deviation": "-8.93",
      "metric_value": "37.85",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 792,
    "fields": {
      "baseline": 32,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "40.12",
      "baseline_stddev": "5.36",
      "deviation": "0.02",
      "metric_value": "40.14",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 793,
    "fields": {
      "baseline": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "48.60",
      "baseline_stddev": "7.36",
      "deviation": "9.62",
      "metric_value": "58.22",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 794,
    "fields": {
      "baseline": 136,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "33.91",
      "baseline_stddev": "6.69",
      "deviation": "-4.74",
      "metric_value": "29.17",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 795,
    "fields": {
      "baseline": 74,
      "metric_name": "after_hours_actions",
      "baseline_mean": "49.44",
      "baseline_stddev": "3.24",
      "deviation": "11.86",
      "metric_value": "61.30",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 796,
    "fields": {
      "baseline": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.02",
      "baseline_stddev": "4.36",
      "deviation": "-6.65",
      "metric_value": "27.37",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 797,
    "fields": {
      "baseline": 19,
      "metric_name": "after_hours_actions",
      "baseline_mean": "52.60",
      "baseline_stddev": "3.78",
      "deviation": "-11.66",
      "metric_value": "40.94",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 798,
    "fields": {
      "baseline": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": "24.25",
      "baseline_stddev": "3.09",
      "deviation": "4.40",
      "metric_value": "28.65",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 799,
    "fields": {
      "baseline": 121,
      "metric_name": "after_hours_actions",
      "baseline_mean": "47.44",
      "baseline_stddev": "3.90",
      "deviation": "-7.52",
      "metric_value": "39.92",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 800,
    "fields": {
      "baseline": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "27.75",
      "baseline_stddev": "4.70",
      "deviation": "-1.65",
      "metric_value": "26.10",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 801,
    "fields": {
      "baseline": 24,
      "metric_name": "privileged_commands",
      "baseline_mean": "50.31",
      "baseline_stddev": "4.67",
      "deviation": "0.28",
      "metric_value": "50.59",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 802,
    "fields": {
      "baseline": 96,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "55.62",
      "baseline_stddev": "4.46",
      "deviation": "-11.86",
      "metric_value": "43.76",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 803,
    "fields": {
      "baseline": 128,
      "metric_name": "privileged_commands",
      "baseline_mean": "36.70",
      "baseline_stddev": "8.88",
      "deviation": "13.93",
      "metric_value": "50.63",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 804,
    "fields": {
      "baseline": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "33.73",
      "baseline_stddev": "4.64",
      "deviation": "-11.20",
      "metric_value": "22.53",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 805,
    "fields": {
      "baseline": 49,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "37.40",
      "baseline_stddev": "4.51",
      "deviation": "-0.10",
      "metric_value": "37.30",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 806,
    "fields": {
      "baseline": 7,
      "metric_name": "privileged_commands",
      "baseline_mean": "28.55",
      "baseline_stddev": "7.85",
      "deviation": "3.06",
      "metric_value": "31.61",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 807,
    "fields": {
      "baseline": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": "63.56",
      "baseline_stddev": "7.66",
      "deviation": "6.48",
      "metric_value": "70.04",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 808,
    "fields": {
      "baseline": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.17",
      "baseline_stddev": "3.53",
      "deviation": "-7.00",
      "metric_value": "27.17",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 809,
    "fields": {
      "baseline": 74,
      "metric_name": "after_hours_actions",
      "baseline_mean": "49.44",
      "baseline_stddev": "3.24",
      "deviation": "4.31",
      "metric_value": "53.75",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 810,
    "fields": {
      "baseline": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": "31.24",
      "baseline_stddev": "3.60",
      "deviation": "-10.55",
      "metric_value": "20.69",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 811,
    "fields": {
      "baseline": 48,
      "metric_name": "failed_authentications",
      "baseline_mean": "48.10",
      "baseline_stddev": "7.35",
      "deviation": "0.28",
      "metric_value": "48.38",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 812,
    "fields": {
      "baseline": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": "61.90",
      "baseline_stddev": "3.17",
      "deviation": "-10.86",
      "metric_value": "51.04",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 813,
    "fields": {
      "baseline": 35,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "36.56",
      "baseline_stddev": "6.43",
      "deviation": "-3.81",
      "metric_value": "32.75",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 814,
    "fields": {
      "baseline": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": "34.63",
      "baseline_stddev": "4.07",
      "deviation": "3.68",
      "metric_value": "38.31",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 815,
    "fields": {
      "baseline": 88,
      "metric_name": "privileged_commands",
      "baseline_mean": "21.65",
      "baseline_stddev": "5.31",
      "deviation": "2.53",
      "metric_value": "24.18",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 816,
    "fields": {
      "baseline": 128,
      "metric_name": "privileged_commands",
      "baseline_mean": "36.70",
      "baseline_stddev": "8.88",
      "deviation": "1.06",
      "metric_value": "37.76",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 817,
    "fields": {
      "baseline": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": "45.12",
      "baseline_stddev": "7.21",
      "deviation": "-2.11",
      "metric_value": "43.01",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 818,
    "fields": {
      "baseline": 26,
      "metric_name": "after_hours_actions",
      "baseline_mean": "16.89",
      "baseline_stddev": "7.02",
      "deviation": "8.00",
      "metric_value": "24.89",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 819,
    "fields": {
      "baseline": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": "41.70",
      "baseline_stddev": "4.92",
      "deviation": "-0.73",
      "metric_value": "40.97",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 820,
    "fields": {
      "baseline": 9,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "26.84",
      "baseline_stddev": "3.25",
      "deviation": "-0.99",
      "metric_value": "25.85",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 821,
    "fields": {
      "baseline": 130,
      "metric_name": "failed_authentications",
      "baseline_mean": "46.54",
      "baseline_stddev": "5.21",
      "deviation": "-1.47",
      "metric_value": "45.07",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 822,
    "fields": {
      "baseline": 122,
      "metric_name": "after_hours_actions",
      "baseline_mean": "34.55",
      "baseline_stddev": "8.23",
      "deviation": "-5.93",
      "metric_value": "28.62",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 823,
    "fields": {
      "baseline": 68,
      "metric_name": "failed_authentications",
      "baseline_mean": "33.67",
      "baseline_stddev": "8.84",
      "deviation": "-3.57",
      "metric_value": "30.10",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 824,
    "fields": {
      "baseline": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "36.23",
      "baseline_stddev": "6.56",
      "deviation": "1.12",
      "metric_value": "37.35",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 825,
    "fields": {
      "baseline": 94,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "35.90",
      "baseline_stddev": "6.88",
      "deviation": "-1.18",
      "metric_value": "34.72",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 826,
    "fields": {
      "baseline": 49,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "37.40",
      "baseline_stddev": "4.51",
      "deviation": "2.44",
      "metric_value": "39.84",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 827,
    "fields": {
      "baseline": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "41.21",
      "baseline_stddev": "8.09",
      "deviation": "16.04",
      "metric_value": "57.25",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 828,
    "fields": {
      "baseline": 33,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "32.15",
      "baseline_stddev": "6.52",
      "deviation": "-16.31",
      "metric_value": "15.84",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 829,
    "fields": {
      "baseline": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "55.56",
      "baseline_stddev": "8.65",
      "deviation": "7.18",
      "metric_value": "62.74",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 830,
    "fields": {
      "baseline": 32,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "40.12",
      "baseline_stddev": "5.36",
      "deviation": "0.73",
      "metric_value": "40.85",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 831,
    "fields": {
      "baseline": 37,
      "metric_name": "privileged_commands",
      "baseline_mean": "41.39",
      "baseline_stddev": "5.66",
      "deviation": "-5.80",
      "metric_value": "35.59",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 832,
    "fields": {
      "baseline": 107,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.93",
      "baseline_stddev": "7.64",
      "deviation": "-2.73",
      "metric_value": "50.20",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 833,
    "fields": {
      "baseline": 1,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "46.46",
      "baseline_stddev": "3.55",
      "deviation": "-8.91",
      "metric_value": "37.55",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 834,
    "fields": {
      "baseline": 18,
      "metric_name": "failed_authentications",
      "baseline_mean": "39.22",
      "baseline_stddev": "4.32",
      "deviation": "2.39",
      "metric_value": "41.61",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 835,
    "fields": {
      "baseline": 105,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "36.37",
      "baseline_stddev": "7.35",
      "deviation": "7.88",
      "metric_value": "44.25",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 836,
    "fields": {
      "baseline": 42,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "46.25",
      "baseline_stddev": "3.74",
      "deviation": "1.41",
      "metric_value": "47.66",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 837,
    "fields": {
      "baseline": 21,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "44.88",
      "baseline_stddev": "5.51",
      "deviation": "1.08",
      "metric_value": "45.96",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 838,
    "fields": {
      "baseline": 37,
      "metric_name": "privileged_commands",
      "baseline_mean": "41.39",
      "baseline_stddev": "5.66",
      "deviation": "-12.46",
      "metric_value": "28.93",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 839,
    "fields": {
      "baseline": 38,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.41",
      "baseline_stddev": "3.37",
      "deviation": "-6.96",
      "metric_value": "35.45",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 840,
    "fields": {
      "baseline": 101,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "52.70",
      "baseline_stddev": "8.21",
      "deviation": "3.28",
      "metric_value": "55.98",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 841,
    "fields": {
      "baseline": 94,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "35.90",
      "baseline_stddev": "6.88",
      "deviation": "0.89",
      "metric_value": "36.79",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 842,
    "fields": {
      "baseline": 82,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.14",
      "baseline_stddev": "4.45",
      "deviation": "0.20",
      "metric_value": "35.34",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 843,
    "fields": {
      "baseline": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": "48.48",
      "baseline_stddev": "5.35",
      "deviation": "-5.23",
      "metric_value": "43.25",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 844,
    "fields": {
      "baseline": 140,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.16",
      "baseline_stddev": "5.98",
      "deviation": "4.20",
      "metric_value": "56.36",
      "observed_on": "2025-05-03"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 845,
    "fields": {
      "baseline": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "55.56",
      "baseline_stddev": "8.65",
      "deviation": "-0.70",
      "metric_value": "54.86",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 846,
    "fields": {
      "baseline": 89,
      "metric_name": "after_hours_actions",
      "baseline_mean": "33.27",
      "baseline_stddev": "3.00",
      "deviation": "-11.22",
      "metric_value": "22.05",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 847,
    "fields": {
      "baseline": 29,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.00",
      "baseline_stddev": "4.99",
      "deviation": "2.03",
      "metric_value": "54.03",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 848,
    "fields": {
      "baseline": 65,
      "metric_name": "after_hours_actions",
      "baseline_mean": "47.99",
      "baseline_stddev": "3.71",
      "deviation": "-4.24",
      "metric_value": "43.75",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 849,
    "fields": {
      "baseline": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": "34.63",
      "baseline_stddev": "4.07",
      "deviation": "-8.10",
      "metric_value": "26.53",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 850,
    "fields": {
      "baseline": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": "21.86",
      "baseline_stddev": "5.81",
      "deviation": "5.37",
      "metric_value": "27.23",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 851,
    "fields": {
      "baseline": 141,
      "metric_name": "privileged_commands",
      "baseline_mean": "53.45",
      "baseline_stddev": "4.83",
      "deviation": "-6.35",
      "metric_value": "47.10",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 852,
    "fields": {
      "baseline": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "42.87",
      "baseline_stddev": "5.14",
      "deviation": "5.92",
      "metric_value": "48.79",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 853,
    "fields": {
      "baseline": 113,
      "metric_name": "after_hours_actions",
      "baseline_mean": "39.34",
      "baseline_stddev": "6.19",
      "deviation": "-3.72",
      "metric_value": "35.62",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 854,
    "fields": {
      "baseline": 4,
      "metric_name": "privileged_commands",
      "baseline_mean": "27.18",
      "baseline_stddev": "6.73",
      "deviation": "1.95",
      "metric_value": "29.13",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 855,
    "fields": {
      "baseline": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "55.56",
      "baseline_stddev": "8.65",
      "deviation": "0.45",
      "metric_value": "56.01",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 856,
    "fields": {
      "baseline": 6,
      "metric_name": "failed_authentications",
      "baseline_mean": "32.76",
      "baseline_stddev": "4.46",
      "deviation": "-2.87",
      "metric_value": "29.89",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 857,
    "fields": {
      "baseline": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "36.23",
      "baseline_stddev": "6.56",
      "deviation": "-5.27",
      "metric_value": "30.96",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 858,
    "fields": {
      "baseline": 102,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "25.02",
      "baseline_stddev": "3.88",
      "deviation": "-0.22",
      "metric_value": "24.80",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 859,
    "fields": {
      "baseline": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "30.32",
      "baseline_stddev": "5.52",
      "deviation": "-1.90",
      "metric_value": "28.42",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 860,
    "fields": {
      "baseline": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.89",
      "baseline_stddev": "5.26",
      "deviation": "3.64",
      "metric_value": "36.53",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 861,
    "fields": {
      "baseline": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": "33.82",
      "baseline_stddev": "6.10",
      "deviation": "1.59",
      "metric_value": "35.41",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 862,
    "fields": {
      "baseline": 17,
      "metric_name": "failed_authentications",
      "baseline_mean": "48.00",
      "baseline_stddev": "7.45",
      "deviation": "2.97",
      "metric_value": "50.97",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 863,
    "fields": {
      "baseline": 29,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.00",
      "baseline_stddev": "4.99",
      "deviation": "-7.18",
      "metric_value": "44.82",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 864,
    "fields": {
      "baseline": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "42.87",
      "baseline_stddev": "5.14",
      "deviation": "7.43",
      "metric_value": "50.30",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 865,
    "fields": {
      "baseline": 1,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "46.46",
      "baseline_stddev": "3.55",
      "deviation": "-10.63",
      "metric_value": "35.83",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 866,
    "fields": {
      "baseline": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "34.17",
      "baseline_stddev": "3.53",
      "deviation": "4.46",
      "metric_value": "38.63",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 867,
    "fields": {
      "baseline": 93,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.09",
      "baseline_stddev": "4.82",
      "deviation": "17.53",
      "metric_value": "52.62",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 868,
    "fields": {
      "baseline": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": "30.46",
      "baseline_stddev": "4.78",
      "deviation": "5.01",
      "metric_value": "35.47",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 869,
    "fields": {
      "baseline": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "33.73",
      "baseline_stddev": "4.64",
      "deviation": "1.73",
      "metric_value": "35.46",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 870,
    "fields": {
      "baseline": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": "38.01",
      "baseline_stddev": "7.08",
      "deviation": "-1.11",
      "metric_value": "36.90",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 871,
    "fields": {
      "baseline": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.73",
      "baseline_stddev": "7.79",
      "deviation": "-1.69",
      "metric_value": "46.04",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 872,
    "fields": {
      "baseline": 117,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "31.93",
      "baseline_stddev": "6.91",
      "deviation": "-3.14",
      "metric_value": "28.79",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 873,
    "fields": {
      "baseline": 25,
      "metric_name": "after_hours_actions",
      "baseline_mean": "43.96",
      "baseline_stddev": "4.00",
      "deviation": "13.40",
      "metric_value": "57.36",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 874,
    "fields": {
      "baseline": 16,
      "metric_name": "failed_authentications",
      "baseline_mean": "54.84",
      "baseline_stddev": "8.29",
      "deviation": "5.24",
      "metric_value": "60.08",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 875,
    "fields": {
      "baseline": 57,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "45.61",
      "baseline_stddev": "5.33",
      "deviation": "-12.56",
      "metric_value": "33.05",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 876,
    "fields": {
      "baseline": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": "31.24",
      "baseline_stddev": "3.60",
      "deviation": "-3.83",
      "metric_value": "27.41",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 877,
    "fields": {
      "baseline": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.89",
      "baseline_stddev": "5.26",
      "deviation": "-6.12",
      "metric_value": "26.77",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 878,
    "fields": {
      "baseline": 33,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "32.15",
      "baseline_stddev": "6.52",
      "deviation": "0.37",
      "metric_value": "32.52",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 879,
    "fields": {
      "baseline": 76,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "48.32",
      "baseline_stddev": "5.99",
      "deviation": "6.89",
      "metric_value": "55.21",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 880,
    "fields": {
      "baseline": 42,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "46.25",
      "baseline_stddev": "3.74",
      "deviation": "4.32",
      "metric_value": "50.57",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 881,
    "fields": {
      "baseline": 16,
      "metric_name": "failed_authentications",
      "baseline_mean": "54.84",
      "baseline_stddev": "8.29",
      "deviation": "-0.87",
      "metric_value": "53.97",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 882,
    "fields": {
      "baseline": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": "32.89",
      "baseline_stddev": "5.26",
      "deviation": "14.06",
      "metric_value": "46.95",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 883,
    "fields": {
      "baseline": 121,
      "metric_name": "after_hours_actions",
      "baseline_mean": "47.44",
      "baseline_stddev": "3.90",
      "deviation": "3.04",
      "metric_value": "50.48",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 884,
    "fields": {
      "baseline": 37,
      "metric_name": "privileged_commands",
      "baseline_mean": "41.39",
      "baseline_stddev": "5.66",
      "deviation": "-3.92",
      "metric_value": "37.47",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 885,
    "fields": {
      "baseline": 21,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "44.88",
      "baseline_stddev": "5.51",
      "deviation": "-2.08",
      "metric_value": "42.80",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 886,
    "fields": {
      "baseline": 140,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.16",
      "baseline_stddev": "5.98",
      "deviation": "4.97",
      "metric_value": "57.13",
      "observed_on": "2025-05-04"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 887,
    "fields": {
      "baseline": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": "30.46",
      "baseline_stddev": "4.78",
      "deviation": "-6.61",
      "metric_value": "23.85",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 888,
    "fields": {
      "baseline": 18,
      "metric_name": "failed_authentications",
      "baseline_mean": "39.22",
      "baseline_stddev": "4.32",
      "deviation": "1.49",
      "metric_value": "40.71",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 889,
    "fields": {
      "baseline": 82,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "35.14",
      "baseline_stddev": "4.45",
      "deviation": "-5.75",
      "metric_value": "29.39",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 890,
    "fields": {
      "baseline": 3,
      "metric_name": "failed_authentications",
      "baseline_mean": "54.01",
      "baseline_stddev": "8.84",
      "deviation": "1.36",
      "metric_value": "55.37",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 891,
    "fields": {
      "baseline": 2,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "47.77",
      "baseline_stddev": "8.91",
      "deviation": "8.70",
      "metric_value": "56.47",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 892,
    "fields": {
      "baseline": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": "38.27",
      "baseline_stddev": "3.29",
      "deviation": "6.45",
      "metric_value": "44.72",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 893,
    "fields": {
      "baseline": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": "34.63",
      "baseline_stddev": "4.07",
      "deviation": "9.35",
      "metric_value": "43.98",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 894,
    "fields": {
      "baseline": 29,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.00",
      "baseline_stddev": "4.99",
      "deviation": "-3.47",
      "metric_value": "48.53",
      "observed_on": "2025-05-07"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 895,
    "fields": {
      "baseline": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": "47.14",
      "baseline_stddev": "3.69",
      "deviation": "-3.70",
      "metric_value": "43.44",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 896,
    "fields": {
      "baseline": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": "33.82",
      "baseline_stddev": "6.10",
      "deviation": "0.18",
      "metric_value": "34.00",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 897,
    "fields": {
      "baseline": 136,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": "33.91",
      "baseline_stddev": "6.69",
      "deviation": "-0.52",
      "metric_value": "33.39",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 898,
    "fields": {
      "baseline": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "42.87",
      "baseline_stddev": "5.14",
      "deviation": "4.48",
      "metric_value": "47.35",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 899,
    "fields": {
      "baseline": 65,
      "metric_name": "after_hours_actions",
      "baseline_mean": "47.99",
      "baseline_stddev": "3.71",
      "deviation": "-5.86",
      "metric_value": "42.13",
      "observed_on": "2025-05-06"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 900,
    "fields": {
      "baseline": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": "24.25",
      "baseline_stddev": "3.09",
      "deviation": "-7.09",
      "metric_value": "17.16",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 901,
    "fields": {
      "baseline": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "28.93",
      "baseline_stddev": "5.95",
      "deviation": "5.51",
      "metric_value": "34.44",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 902,
    "fields": {
      "baseline": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": "37.96",
      "baseline_stddev": "4.69",
      "deviation": "-7.30",
      "metric_value": "30.66",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 903,
    "fields": {
      "baseline": 127,
      "metric_name": "privileged_commands",
      "baseline_mean": "39.14",
      "baseline_stddev": "5.90",
      "deviation": "7.12",
      "metric_value": "46.26",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 904,
    "fields": {
      "baseline": 11,
      "metric_name": "privileged_commands",
      "baseline_mean": "41.52",
      "baseline_stddev": "3.02",
      "deviation": "3.78",
      "metric_value": "45.30",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 905,
    "fields": {
      "baseline": 108,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": "52.02",
      "baseline_stddev": "4.88",
      "deviation": "5.99",
      "metric_value": "58.01",
      "observed_on": "2025-05-05"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 906,
    "fields": {
      "baseline": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": "46.49",
      "baseline_stddev": "3.50",
      "deviation": "2.90",
      "metric_value": "49.39",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 907,
    "fields": {
      "baseline": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "28.93",
      "baseline_stddev": "5.95",
      "deviation": "2.53",
      "metric_value": "31.46",
      "observed_on": "2025-05-09"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 908,
    "fields": {
      "baseline": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": "38.29",
      "baseline_stddev": "4.56",
      "deviation": "6.84",
      "metric_value": "45.13",
      "observed_on": "2025-05-08"
    }
  },
  {
    "model": "app.dailyobservation",
    "pk": 909,
    "fields": {
      "baseline": 10,
      "metric_name": "failed_authentications",
      "baseline_mean": "42.61",
      "baseline_stddev": "5.85",
      "deviation": "-11.74",
      "metric_value": "30.87",
      "observed_on": "2025-05-07"
    }
  }
]