It is possible to make searches by "lastupdatetime" field?

[Oscar_Bernat]

We work in a BAS technology to test security controls continuously, missing events because of the log suppression (default config) puts us in troubles because our test outcome is filled with false negatives (all suppressed logs)

It seems that the field "lastupdatetime" is not indexed by default, so it can't be included in searches through the UI and also through the API.

Is there any option to force this field to be indexed? or how what do we have to change in the config to be able to search by the "lastupdatetime" field?

[PhoneBoy · Accepted solution]

Changing what field are indexed requires an RFE.
I highly recommend engaging your local Check Point office with your various requirements around logs.

[Oscar_Bernat]

Thanks a lot for all your quick responses.