Hello everyone,
I am creating a kibana rule (7.17) to fire an action to microsoft teams.
If I used the rule type "log threshold" with Notify "On a custom action interval", e.g. every 10 minutes, then the action was invoked every 10 minutes. It was fine.
but if I used the rule type "elasticsearch query" with the same Notify "On a custom action interval", e.g. every 10 minutes, then the action was only invoked ONCE by turning on, and then did not run any more. It was invoked once again if it was switched over.
Could you tell me why? or It should be about a bug?
Thanks