OK.. I think I have it now. There is a max option to the join command which defaults to 1. I adjusted it to match the number of days I was searching for and the all of the records are showing up. ... View more

Thanks. This gives me a good place to start. ... View more

@dagryph Thank you!! Once i madbe it visible on the search head with SoS, then SoS started working again !! ... View more