Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Mark_Edwards
Contributor

HEC Analytics Custom Queries

Hi,

When running a custom query it seems to only go back 6 months or so despite selecting a year.

Is this because of the default Email Meta Data retention period of 180 days as per Appendix G of the admin guide?

e.g. A custom Query for Emails containing Malware will go back to July 2025 while the Security Events Dashboard with 12 months selected and filtering on Malware will reflect all Malware events for the year. 

Just wondering why the difference as we have a customer who wants to get reports via Custom Queries for the whole year. 

 

Thanks. 

0 Kudos
0 Replies

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events