I. Introduction
A network is consisting of various network elements, such are mobile switching center(MSC), home location register(HLR), base station center (BSC), base transceiver station (BTS), router, transmission equipment, and many more. To maintain the availability of network elements, it required constant monitoring of alarm or performance. The alarm is a key aspect that gives a direct indication, whether a problem is happening in the network element. In parallel to alarm, performance is another indication from where detection of a problem initiated. Performance is generally measured in terms of key performance indicator (KPI) or key quality indicator (KQI). The KPI or KQI are derived from the counter, which is generated from the network element. The counters are generating huge volumes from the network element. From the KPI and KQI, data points patterns is identified. Once a pattern is identified, then any deviation from the pattern will be called an anomaly. This type of anomaly detection is efficient for cases where network problems could not be identified by the alarm. Moreover, any anomaly in the network must detect efficiently and the resolution of the anomaly must fix immediately.