aggregate anomalies only by host name