i’v read the documentation for EC forwording and created this rule :
when i select “Warn if list of forwarded logfiles chages” the rule shows the old (missing) files and the new files.
When i disable it and create a new file with “error” in it than it shows nothing and the service status stays OK.
an idea how can i ignore the “missing” files and only show the new ones with Critical and not Warning?