Hi @Sam_Verhoeven,
Doesn't seem like we can reproduce the issue, so I'd suggest tracking back a few step to make sure we are aligned.
I'd start by checking the query filter, to make sure we are getting the right documents into consideration.
Can you executethe following query on a timerange where you're sure there are browser monitor documents available in the last 15 min?
There shouldbe hits for browser indeces, eg "_index": ".ds-synthetics-browser-default-2023.05.04-000001". Otherwise, it would point to an indexing issue and I'd ask you to check that @timestamp and monitor.timespan hold somewhat similar values.
GET heartbeat-8*,heartbeat-7*,synthetics-*/_search
{
"query": {
"bool": {
"filter": [
{
"exists": {
"field": "summary"
}
},
{
"bool": {
"must_not": {
"exists": {
"field": "run_once"
}
}
}
},
{
"bool": {
"filter": [
{
"range": {
"@timestamp": {
"gte": "now-15m",
"lte": "now"
}
}
},
{
"bool": {
"should": [
{
"range": {
"monitor.timespan": {
"gte": "now-20m",
"lte": "now"
}
}
},
{
"bool": {
"must_not": {
"exists": {
"field": "monitor.timespan"
}
}
}
}
]
}
}
]
}
}
]
}
}
}