Elapsed Plugin Customization

Elastic Stack Elasticsearch
1

The elapsed filter collects all the "start events". If two, or more, "start events" have the same ID, only the first one is recorded, the others are discarded.

I want it to discard first one (Expired) and update timestamp with second try. Possible? If yes, then how?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.