In kibana visualization , for example in last 15 minute the kibana visulization shows that user x has count 10 then after 15 minutes if a user is not using computer then it should show count 0 and yes it should also show user x
Last 15 minutes
host_name Total Count
John 250
After some time if a particular user is not using the system or system is shutdown then it should show
host_name Total Count
John 0