Describe the bug
v4.4.0 introduced the feature to define throttling for detections:
throttling:
period: 3600s #time period to throttle
fields: name,host # fields to throttle on
but for this to work alert.digest_mode has to be set to 0 when the fields key is defined, as per docs.
Expected behavior
The value for alert.digest_mode should be dynamic when the fields key is defined.
Screenshots
If applicable, add screenshots to help explain your problem.
contentctl Version:
v5.5.9
Additional context
Add any other context about the problem here.