Split Data and Train the Anomaly Model
This block separates providers by their historical label, then creates a training set made of only normal/non-fraud providers and a testing set that keeps the remaining normal providers plus all labeled fraud providers. After selecting the model input features, it starts an H2O environment, trains an Isolation Forest on the normal training patterns, applies that model to the test providers, converts the results back into a regular KNIME table, and saves the trained model for reuse.