Detection of Inactive Log Sources in the Last Hour

Aniket Trimbake@aniket93

•updated Jun 25, 2025•4•5•100

The rule identifies log sources that have stopped sending data in the last hour despite being active in the past 24 hours, suggesting possible misconfigurations or disruptions. The rule is valid.