Identify anomalous daily spending by subaccount and region v1.3

Source: FOCUS 1.0 sample
Result rows: 500
Status: Adapted to v1.0
Execution: PrecomputedRead-only
Result snapshot (UTC): 2026-10-11

Daily effective cost per service provider, sub account and region, for spotting anomalous days. ServiceProviderName (v1.3+) is derived from provider_name, or publisher_name for marketplace sellers. The full grain is about 10,000 rows for March 2026, so the result keeps the 500 rows with the largest absolute cost (covering all non-zero rows); AWS and Oracle effective_cost values in this sample are whole-dollar rounded, so many AWS rows show 0 effective cost.

Column adaptations (1)

Daily effective cost by sub account

Chart controls and notes

The largest 7 series keep their own colors; the remaining series are combined as Other.

Query results
Day	Service provider name	Sub account id	Region id	Region name	Daily effective cost
2026-03-12	AWS	11353890204	us-east-1	US East (N. Virginia)	-$121.00
2026-03-27	AWS	11353890204	us-east-1	US East (N. Virginia)	$103.00
2026-03-26	AWS	11353890204	us-east-1	US East (N. Virginia)	$93.00
2026-03-30	AWS	11353890204	us-east-1	US East (N. Virginia)	-$79.00
2026-03-17	AWS	11353890204	us-east-1	US East (N. Virginia)	-$75.00
2026-03-18	Microsoft	/subscriptions/1caaa5a3-2b66-438e-8ab4-bce37d518c5d	westus2	West US 2	$62.60
2026-03-19	AWS	11353890204	us-east-1	US East (N. Virginia)	$51.00
2026-03-04	Microsoft	/subscriptions/1caaa5a3-2b66-438e-8ab4-bce37d518c5d	westus2	West US 2	$48.13
2026-03-16	AWS	11353890204	us-east-1	US East (N. Virginia)	$48.00
2026-03-29	AWS	11353890204	us-east-1	US East (N. Virginia)	$39.00
2026-03-23	AWS	11353890204	us-east-1	US East (N. Virginia)	-$38.00
2026-03-09	Microsoft	/subscriptions/1caaa5a3-2b66-438e-8ab4-bce37d518c5d	westus2	West US 2	$37.21
2026-03-21	AWS	11353890204	us-east-1	US East (N. Virginia)	-$37.00
2026-03-25	AWS	11353890204	us-east-1	US East (N. Virginia)	$35.00
2026-03-16	Microsoft	/subscriptions/1caaa5a3-2b66-438e-8ab4-bce37d518c5d	westus2	West US 2	$33.39
2026-03-15	AWS	11353890204	us-east-1	US East (N. Virginia)	-$31.00
2026-03-20	AWS	11353890204	us-east-1	US East (N. Virginia)	$31.00
2026-03-12	Microsoft	/subscriptions/1caaa5a3-2b66-438e-8ab4-bce37d518c5d	westus2	West US 2	$28.86
2026-03-14	AWS	11353890204	us-east-1	US East (N. Virginia)	$26.00
2026-03-13	AWS	11353890204	us-east-1	US East (N. Virginia)	$25.00
2026-03-24	AWS	11353890204	us-east-1	US East (N. Virginia)	$25.00
2026-03-28	AWS	11353890204	us-east-1	US East (N. Virginia)	$22.00
2026-03-02	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	eastus2	East US 2	$21.16
2026-03-18	AWS	11353890204	us-east-1	US East (N. Virginia)	-$20.00
2026-03-18	Microsoft	/subscriptions/ed570627-0265-4620-bb42-bae06bcfa914	eastus	East US	$17.33
2026-03-14	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	eastus2	East US 2	$17.22
2026-03-15	Microsoft	/subscriptions/1caaa5a3-2b66-438e-8ab4-bce37d518c5d	westus2	West US 2	$15.61
2026-03-10	Microsoft	/subscriptions/ed570627-0265-4620-bb42-bae06bcfa914	eastus	East US	$14.55
2026-03-14	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	southcentralus	South Central US	$14.40
2026-03-03	Microsoft	/subscriptions/ed570627-0265-4620-bb42-bae06bcfa914	eastus	East US	$14.32
2026-03-09	AWS	11353890204	us-east-1	US East (N. Virginia)	$14.00
2026-03-11	AWS	11353890204	us-east-1	US East (N. Virginia)	$13.00
2026-03-04	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	eastus2	East US 2	$11.38
2026-03-08	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	eastus2	East US 2	$10.78
2026-03-04	Microsoft	/subscriptions/299611fd-f57d-4591-a2ce-b485ba0021cd	canadacentral	Canada Central	$10.66
2026-03-08	Microsoft	/subscriptions/9ec51cfd-5ca7-4d76-8101-dd0a4abc5674	eastus	East US	-$10.33
2026-03-18	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	eastus2	East US 2	-$10.03
2026-03-10	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	eastus	East US	$10.00
2026-03-25	AWS	52305261521	ap-northeast-1	Japan	-$10.00
2026-03-03	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	eastus2	East US 2	-$9.87
2026-03-02	Microsoft	/subscriptions/ed570627-0265-4620-bb42-bae06bcfa914	eastus	East US	$9.73
2026-03-14	Microsoft	/subscriptions/1caaa5a3-2b66-438e-8ab4-bce37d518c5d	westus2	West US 2	$9.70
2026-03-02	Microsoft	/subscriptions/1caaa5a3-2b66-438e-8ab4-bce37d518c5d	westus2	West US 2	$9.60
2026-03-03	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	westcentralus	West Central US	$9.60
2026-03-12	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	westcentralus	West Central US	$9.60
2026-03-07	Microsoft	/subscriptions/9ec51cfd-5ca7-4d76-8101-dd0a4abc5674	eastus	East US	$9.21
2026-03-01	Microsoft	/subscriptions/9ec51cfd-5ca7-4d76-8101-dd0a4abc5674	eastus	East US	-$8.95
2026-03-07	Microsoft	/subscriptions/ed570627-0265-4620-bb42-bae06bcfa914	eastus	East US	$8.77
2026-03-05	Microsoft	/subscriptions/1caaa5a3-2b66-438e-8ab4-bce37d518c5d	westus2	West US 2	$8.50
2026-03-07	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	eastus	East US	-$8.21
2026-03-25	AWS	45038667490	us-west-2	US West (Oregon)	-$8.00
2026-03-11	Microsoft	/subscriptions/1caaa5a3-2b66-438e-8ab4-bce37d518c5d	westus2	West US 2	$7.88
2026-03-18	Microsoft	/subscriptions/9ec51cfd-5ca7-4d76-8101-dd0a4abc5674	eastus	East US	$7.77
2026-03-17	Microsoft	/subscriptions/9ec51cfd-5ca7-4d76-8101-dd0a4abc5674	eastus	East US	-$7.66
2026-03-15	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	southcentralus	South Central US	$7.20
2026-03-03	Datadog Inc.	69918885631	us-east-1	–	$7.20
2026-03-03	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	southcentralus	South Central US	$7.20
2026-03-20	Datadog Inc.	69918885631	us-east-1	–	$7.20
2026-03-21	Datadog Inc.	69918885631	us-east-1	–	$7.20
2026-03-30	Datadog Inc.	69918885631	us-east-1	–	$7.20
2026-03-13	Microsoft	/subscriptions/1caaa5a3-2b66-438e-8ab4-bce37d518c5d	westus2	West US 2	$7.18
2026-03-13	Microsoft	/subscriptions/9ec51cfd-5ca7-4d76-8101-dd0a4abc5674	westus	West US	$7.02
2026-03-04	Microsoft	/subscriptions/9ec51cfd-5ca7-4d76-8101-dd0a4abc5674	eastus	East US	-$7.02
2026-03-22	AWS	11353890204	us-east-1	US East (N. Virginia)	$7.00
2026-03-19	Microsoft	/subscriptions/1caaa5a3-2b66-438e-8ab4-bce37d518c5d	westus2	West US 2	$6.99
2026-03-05	Microsoft	/subscriptions/ed570627-0265-4620-bb42-bae06bcfa914	eastus	East US	$6.90
2026-03-03	Microsoft	/subscriptions/1caaa5a3-2b66-438e-8ab4-bce37d518c5d	westus	West US	$6.62
2026-03-11	Microsoft	/subscriptions/9ec51cfd-5ca7-4d76-8101-dd0a4abc5674	eastus	East US	$6.47
2026-03-05	AWS	11353890204	us-east-1	US East (N. Virginia)	$6.00
2026-03-09	AWS	69460568468	us-west-2	US West (Oregon)	$6.00
2026-03-10	Oracle	ocid6.tenancy.oc6..aaaaaaaalnpeq6xok1okj8vknc9pzancima2g8bwvk2kk9jgwhgycacrie2q	–	us-sanjose-1	$6.00
2026-03-18	AWS	18938484842	ap-southeast-1	Asia Pacific (Singapore)	$6.00
2026-03-21	AWS	70077301883	us-west-2	US West (Oregon)	-$6.00
2026-03-29	AWS	70077301883	us-west-2	US West (Oregon)	-$6.00
2026-03-01	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	ukwest	UK West	-$5.91
2026-03-14	Microsoft	/subscriptions/9ec51cfd-5ca7-4d76-8101-dd0a4abc5674	eastus	East US	-$5.83
2026-03-13	Microsoft	/subscriptions/9ec51cfd-5ca7-4d76-8101-dd0a4abc5674	eastus	East US	$5.46
2026-03-07	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	francecentral	France Central	$5.26
2026-03-13	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	eastus2	East US 2	$5.08
2026-03-01	Datadog Inc.	69918885631	us-east-1	–	$5.04
2026-03-02	AWS	18938484842	eu-central-1	EU (Frankfurt)	$5.00
2026-03-03	AWS	11353890204	us-east-1	US East (N. Virginia)	-$5.00
2026-03-03	AWS	18938484842	eu-central-1	EU (Frankfurt)	$5.00
2026-03-04	AWS	18938484842	ap-southeast-1	Asia Pacific (Singapore)	$5.00
2026-03-06	AWS	18938484842	ap-southeast-1	Asia Pacific (Singapore)	$5.00
2026-03-09	AWS	18938484842	eu-central-1	EU (Frankfurt)	$5.00
2026-03-14	AWS	18938484842	ap-southeast-1	Asia Pacific (Singapore)	$5.00
2026-03-14	AWS	18938484842	eu-central-1	EU (Frankfurt)	$5.00
2026-03-23	AWS	18938484842	us-east-1	US East (N. Virginia)	$5.00
2026-03-24	AWS	18938484842	ap-southeast-1	Asia Pacific (Singapore)	$5.00
2026-03-25	AWS	18938484842	eu-central-1	EU (Frankfurt)	$5.00
2026-03-28	AWS	18938484842	ap-southeast-1	Asia Pacific (Singapore)	$5.00
2026-03-30	AWS	18938484842	eu-central-1	EU (Frankfurt)	$5.00
2026-03-04	Microsoft	/subscriptions/ed570627-0265-4620-bb42-bae06bcfa914	eastus	East US	$4.79
2026-03-10	Microsoft	/subscriptions/ed570627-0265-4620-bb42-bae06bcfa914	uksouth	UK South	$4.70
2026-03-11	Microsoft	/subscriptions/73c0021f-a37d-433f-8baa-7450cb54eea6	westus	West US	$4.51
2026-03-08	Microsoft	/subscriptions/73c0021f-a37d-433f-8baa-7450cb54eea6	westus	West US	$4.51
2026-03-15	Microsoft	/subscriptions/73c0021f-a37d-433f-8baa-7450cb54eea6	westus	West US	$4.51
2026-03-13	Microsoft	/subscriptions/9ec51cfd-5ca7-4d76-8101-dd0a4abc5674	eastasia	East Asia	$4.40
2026-03-19	Microsoft	/subscriptions/64e355d7-997c-491d-b0c1-8414dccfcf42	eastus2	East US 2	-$4.39

Showing 100 of 500 rows. Scroll inside the table to see more.

Default parameters use the precomputed result, generated as the read-only focus_reader role.

Inspect Postgres SQL and original FOCUS SQL

Postgres SQL, as run

select (charge_period_start at time zone 'UTC')::date as day,
       case when publisher_name is not null and publisher_name is distinct from invoice_issuer_name then publisher_name else provider_name end as service_provider_name,
       sub_account_id as sub_account_id,
       region_id as region_id,
       region_name as region_name,
       sum(effective_cost) as daily_effective_cost
from focus.cost_and_usage
where charge_period_start >= $1::timestamptz
  and charge_period_end < $2::timestamptz
group by 1, 2, sub_account_id, region_id, region_name
order by abs(sum(effective_cost)) desc nulls last, day, service_provider_name, sub_account_id, region_id
limit 500

Parameters: $1 = period_start, $2 = period_end

Original FOCUS SQL

SELECT
  DATE(ChargePeriodStart) AS Day,
  ServiceProviderName,
  SubAccountId,
  RegionId,
  RegionName,
  SUM(EffectiveCost) AS DailyEffectiveCost
FROM focus_data_table
WHERE ChargePeriodStart >= ? and ChargePeriodEnd  < ?
GROUP BY
  DATE(ChargePeriodStart) AS StartDay,
  ServiceProviderName,
  SubAccountId,
  RegionId,
  RegionName