I have a saved search which is scheduled for every 17mins with time range of last 7 days. instead of getting results with last 7 days of data, can i get only last 15 or 20mins data and i should not change the time range in saved search from last 7 days .
You can use the savedsearch command to run a saved search in your query. If you use the time picker to specify a time range other than All Time then the saved search will use your selected time range; otherwise, the time range in the saved search will be used.
@nivets- Question has paradox. Do you want to change the time-range or not change the timerange?
I dont want to change the time range.