Detecting inner-LAN anomalies using hierarchical forecasting