Is there anyone tried to create aggregation rules in ESA?..I want to group by any Meta Key but not limiting with counts since I don't want to miss single event.
The issue is sometime I'm getting flooded by email notifications for the particular alert, I knew about email suppression, if I enable it then there is a possibility to miss the notification for new alert. Thanks!!
