I setup splunk insights for infrastructure more than 2 months. I notice that I cannot change time older than 30 days. I need to search the metric and logs older than 30 days. What should I do?
At this time, there's no mechanism for looking back more than 30 days in SII.
At this time, there's no mechanism for looking back more than 30 days in SII.