Hi,
I have elastalert running several rules. Most of them needs to be run every 5 minutes. I have also rules which could be ran once an hour. Problem is that we have a lot data and few hundred elastalert rules and running all rules takes more than five minutes.
Have any one idea how to schedule different rules? I would like to run part of the rules only once in hour and rest of the rules every five minutes.
-JS