I'm trying to make a Real time search that only has 5 minutes of background, is it possible to do?
Yes, Click next to the search bar where the time is. A drop down menu should be displayed, go down to real time (5 minute window)
View solution in original post
what if i already have a search configured and I only want to modify the search time range? something like -5m?
go into searches and reports find your report, and in start time type in -5m@m and at the end time type in now
would be rt-5m but thanks anyway 😄