If you need to detect anomalies as soon as they occur, that seems right. But if you want to detect them later you can also combine back-casting with forecastin

If you need to detect anomalies as soon as they occur, that seems right. But if you want to detect them later you can also combine back-casting with forecasting. Like Kalman smoothing.