Alert when an event is not followed by another

Elastic Security SIEM
6

Hi, unfortunately there is no easy way to do this today. We're working on being able to provide this functionality though, hopefully in the short term.

James

2 Likes