Change duration after which warning "Datafeed has been retrieving no data for a while" appears

Elastic Stack Elasticsearch
1

Hello everyone,

is it possible to change the duration, after which the warning "Datafeed has been retrieving no data for a while" appears relating to an anomaly detection job?

It is perfectly fine, that the datafeed occasionally does not retrieve new data since there are times with no new logs in the index.
However this causes the notification to pop-up very regularly.

Thank you very much in advance!

2

Hi,

Yes, it is possible to change the duration after which the warning "Datafeed has been retrieving no data for a while" appears. This warning is controlled by the query_delay parameter of the datafeed configuration.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.