Events, alerts fired only after a second message arrives

[maxplay]

@jan maybe the problem here is also related to the one @DerBeton (found solution?) posted some days ago…they seem to be similar…

No Event / Alert fired

Hey Graylog Community We have a one node Graylog Setup with Docker. Versions: graylog:3.2.2 mongo:3 elasticsearch-oss:6.8.5 Our environment has only 2 clients connected until now and our log rate is below 1 log/minute. We have an alert set up, which should be triggered as soon as a critical error enters graylog (Search every minute for 1 minute). The Problem is, that the event is only fired, when there is another event after the critical one. For now we solved the problem with a Random H…