We use Kibana 7.8 to measure the uptime of a windows service. We can calculate the percentage as well as the number of hours a windows service has been up or down. But when such a service is shut down we are not able to differentiate whether the shut down was planned or unplanned. We'd like to exclude the planned downtime while calculating the uptime percentages. I am not sure if it is possible to differentiate this in Kibana. Any help is this direction appreciated!