I am trying to make sure that I am doing this correctly, because it doesn't appear to be working.
I have a report for last 24 hr of CheckPoint drops.
i.e. index=CheckPoint action=dropped | timechart count by action
I then select Report Acceleration and select 1 month.
I then create a dashboard that uses the same Report query with a time span of 30 days.
i.e. index=CheckPoint action=dropped | timechart count by action
Report Acceleration completes.
The dashboard should use Report Acceleration to populate, correct?
