Hello!
I set up an event such way:
I use graylog to collect logs from network equipment. And want to get e-mail every 10 minutes with new errors in logs (All messages).
My logs (be careful with timestamps):
So i expected to get today an email with the error in about 10:40. I got this email, but with another old error:
Version - 3.1.4-1. Information in “Filter Preview” is correct, but emails are not (sending previous logs).
Upgraded to 3.2.0, but i have the same issue.
Hello @BHSR,
i tried to reproduce your error but failed. I want to let you know that I am trying again tomorrow.
It looks like a bug to me. Your configuration seems right to me on the first glance. But I will take a closer look tomorrow again. I will let you know if I find anything.
Sorry but I still could not reproduce your problem 
