A system and method for anomaly detection is provided. The system (100) and method (200) include utilizing one or more processors, such as in a server, for receiving (108) operational and dynamics data (104) from sensors associated with devices (102), filtering the data, establishing a set of baseline dynamics data and eliminating data dependencies (110). The system and method further include generating an expected level of data variation (112), identifying an anomaly based on a deviation of the device data from the baseline data normalized by the expected level of data variation (114), optionally correlating an anomaly with potential causes, and providing an output indicating an anomaly (116).