Currently, to create an anomaly-based alert, you need to select the individual nodes that you want to include in the alert one at a time. The ability to create dynamic selection rules or even a select all option from the node picker would make life a lot easier.