1. Logsign Support Center
  2. Logsign Unified SecOps Platform
  3. Search Fundamentals / Data Aggregation

Set the Time Range of a Search

Updated

Beginning

This article will explain how to use time intervals when filtering data in the search section.

Using Time Intervals

When entering the search section, data for the current day (00:00:00 to 23:59:59) is shown as the default. The active range is displayed above the search box as "... events between <start> and <end>". By clicking on this time information, commonly used preset time intervals can be selected, or a custom time range can be set with the start and end date/time fields.

1.png

The preset intervals are Last 1, 3, 10, 15 and 30 minute; Last 1, 3, 6, 12 and 24 hour; Today; Yesterday; Last 3 day; Last Week and Last Month. The same panel also has a Time Column selector, which sets whether the range is applied to Time.Generated (the default) or Time.Received.

For example, when it is necessary to check the data of the last 3 days, select Last 3 day in the panel. The time information is set to the last 3 days. Afterwards, by clicking the Apply button, the data of the last 3 days can be displayed on the screen.

2.png

3.png

Was this article helpful?
0 out of 1 found this helpful

Articles in this section

Become a Certified Logsign User/Administrator
Sign-up for Logsign Academy and take the courses to learn about Logsign USO Platform in detail. Enjoy the courses, and get your badges and certificates. In these courses, you'll learn how to use Logsign in your work and add value to your career.
Visit Our Blog
Our Logsign USO Platform illustrate our expertise. So do the blog. Through our blog posts, deepen your knowledge on various SecOps topics or get updated about important news & modern approaches for cybersecurity. Get into the habit of reading valuable information provided by Logsign. Be a step ahead.