Issue with getting anomaly parameters instead of swarming

From what you said I understand that getting anomaly likelihood like specified here is wrong: Getting anomaly likelihood

Which can partly justify the bad anomaly detection in: Problems with anomaly detection