Threat Intel module for Filebeat : aging off and updating documents

Do any of you know whether or not Elasticsearch and the filebeat threat intel module age off old events or update events that have been modified?

@adrisr maybe you can shed some light here?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.