Will Hallam
ServiceNow Employee

The MID is required for anomaly detection in the current architecture.  Periodic ML jobs calculate bounds and send them to the MIDs which then perform the anomaly detection based on those bounds.