Hello guys, I want to check if 2 logs are sent within 1 minute from one to another, but this alert is not triggering so I guess I’m doing something wrong
{
“size”: 0,
“query”: {
“bool”: {
“filter”: [
{
“range”: {
“Kafkatimestamp”: {
“from”: “now”,
“to”: “1m”,
“include_lower”: false,
“include_upper”: true,
“format”: “epoch_millis”,
“boost”: 1
}
}
}
],
“adjust_pure_negative”: true,
“boost”: 1
}
},
“aggregations”: {}
}