Aspects of the subject disclosure may include, for example, analyzing content flow data in a communication network to obtain flow statistics; the statistics are aggregated to construct a model of the content flow based on the aggregated flow statistics. Operations of network nodes are predicted based on the model; a content delivery path in the communication network is identified. A quality of service is detected for network nodes on the content delivery path. The detected quality of service is compared with a predicted quality of service based on the model; a network anomaly is detected based on the comparing. The content flow on the content delivery path is adjusted responsive to detection of the network anomaly. Other embodiments are disclosed.