That is what I would expect if you have pipeline.java_execution enabled. The three ON events are processed first, then the three OFF events, so only one of them gets an elapsed time added.
That is what I would expect if you have pipeline.java_execution enabled. The three ON events are processed first, then the three OFF events, so only one of them gets an elapsed time added.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.