Real-time operational anomaly detection framework