I am creating so simple custom rules, which supposed to trigger alerts
- my ELK version is 7.14
- i have tested the query in the discover section and it retrieve a result, so the rule should trigger and alert
- is there rule detection log or something? how to troubleshoot this issue?