Filebeat |Microsoft Defender ATP module pull same events multiple times

Elastic Stack Beats
1

I have configured FileBeat Microsoft Defender ATP Module but FileBeat pull same event 20 times.
Microsoft module interval time is,
var.interval: 5m
I couldn't find any variable for this options.

Could someone please explain how can I solve the issue ?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.