2021-04-10 12:59 AM - edited 2021-04-10 03:59 AM
Hi all, i'm looking for help with this problem. After updating an ESA rule in ESA primary correlation service and deploying, i keep getting alerts (even alerts of rules i didn't update) with old events. It doesn't happen when i update a rule in ESA secondary service. So, how can i ignore alerts with old events ? I want ESA rule to detect latest events.