Hello,
I am using a scheduled report to fill a summary index. The report is supposed to work with indextime and process everything, that came new within the last hour.
Therefore I configured the timerange the following way:
But somehow the scheduled report restricts the event time to the last 24 hours, which can yield to no search results in a case, that indexed data is from the day before yesterday:
Does someone know, why this restriction is happening, although the event time is supposed to be unrestricted?
Thanks and best regards
