If we would allow rule samples to update last message time, we would need to restrict it to HTTP devices id say.