API gateway log data of HTTP response information is collected and aggregated for each API service. The log data is streamed and formed into a feature vector. A model training module trains a neural network model based on the feature vector and model metadata. The model training module also retrains the neural network model based on a new feature vector. Neural network model artifacts are stored and used to detect anomalous patterns and generate alerts of the detection.