I am importing my Exchange Tracking Logs in ES and am now trying to create my first Dashboard. I already have a TimeLion visualisation showing the Mail Flow (Inbound and Outbound) showing the last 15 minutes refreshing every minute. I'd like to add a Top 10 senders like this:
My visualisation shows the Top 10 since the beginning of time (when I first started collecting the logs) and doesn't refresh by the minute with the Mail Flow. The chart is set up as follows:
How do I get this to refresh every minute and only show from the filter set on the dash board?