Time range of a search

[christinmb]

I'm trying to make a Real time search that only has 5 minutes of background, is it possible to do?

[Michael_Schyma1 · Accepted solution]

Yes, Click next to the search bar where the time is. A drop down menu should be displayed, go down to real time (5 minute window)

[christinmb]

would be rt-5m but thanks anyway 😄

[Michael_Schyma1]

go into searches and reports find your report, and in start time type in -5m@m and at the end time type in now

[christinmb]

what if i already have a search configured and I only want to modify the search time range? something like -5m?