hi,

need to know what this changes here ? why it is commented out  ? 

How do you calc now time to live ? again with COMBAT_LOG_EVENT_UNFILTERED ?