Hi Andrew,
everything is working as expected. Thanks for your help.
I would like to proceed because my trial license has expired. I found https://www.elastic.co/subscriptions link I want to ensure if i have to buy Gold subscription because its the lowest package with Alerting (Watcher). Is it was mentioned upper I focus my infrastructure to Detect DNS Tunnels.
Thanks for reply.
BR