Good morning,
Im having issues with a native dashboard, and why i can’t view the data.
For example if my search is “between days” it shows data
But if my search is for example “Last 2 days” it does not shows anything.
Im wondering why is this happening.
Maybe is because of the query?
Thanks.
To add more details, for example in a search like “past 3 weeks” it works.
one of the query, for example the one who counts the events is
metadata.log_type = "BINDPLANE_AGENT"
outcome:
$Count = math.round(count(metadata.id), 2)
Do you have a match: section over 48 hours? If so, ircc, you would not get results with windows smaller than that.
match:
$something over 48h //which is your max, coincidentallyAdding the whole yara-l for at least one widget would be helpful.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.