There is no notification when a configuration does not correspond to the data. A bad configuration might not address a single variable in the data, thus not produce any anomaly. For instance, for ApacheAccess data where there is no event types (no templates) because the log_format fully captures the variables.