Create a maintenance window for stack rules with the following KQL filter: host.name: "foo"
Create an ES Query rule that fires an alert and has a server log action
Wait for the rule to run, detect and alert and attach the maintenance window to it
Notice no actions fired while bar a also host of this alert not part of the maintenance window
Expected result
Maintenance window to not apply given bar is a host that isn't part of the maintenance window and the system suppressed a notification that should have sent out.
Steps to reproduce
host.name
(shortcut for copying values)host.name: "foo"
bar
a also host of this alert not part of the maintenance windowExpected result
Maintenance window to not apply given
bar
is a host that isn't part of the maintenance window and the system suppressed a notification that should have sent out.