Deduplication at ingest time is tricky bordering on impossible.  Duplicate events may follow different paths and so be undetectable until search time.  Even if they follow a common path, they may be sufficiently far apart that the EP/IP worker can't detect the duplication.   ... View more

Thank you for the sharing. Very informative.  We have started exploring EP / IP use cases. One of the most awaiting feature from EP is deduplication and would love to hear release ETA. ... View more

It is a good one and use cases based insights helps business to take decision. Love this!  ... View more

@livehybrid Thank you for your quick response. It is a custom method.  But does HEC not helps? or any apps? ... View more