correlation rule is configured as time range -65m to -5m and cron schedule is every 5 minutes then why will there not be duplicate alerts for every 5 min?

[lalitha101]

correlation rule is configured as time range -65m to -5m and cron schedule is every 5 minutes then why will there not be duplicate alerts for every 5 min?

[woodcock]

If you have accurately (completely) documented your configuration then you almost certainly will see duplicates.

[martin_mueller]

Without any context I'm guessing there's a throttling window of 60 minutes defined on some key field to suppress repeat events.