Splunk Search

Why can't I see the logs in the search head when I select the time window?

Yogesh7867
Engager

I can't see the recent logs in the search head for pan devices when i select the time window for anything except all time...however, if i select the time window 'all time' , i can see the recent logs. What might be causing this issue?

index="pan_fw" | search pan2 time window = say last 60 min...no output but if i select time window=all time, it will show the recent logs along with old logs.

Tags (1)
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...