Discover is not working for range between <date> - "now "

Elastic Security SIEM
1

I have a strange problem. In discovery tab, if I specify time between lets say
Jun 1, 2021@ 07:56:46 -> now I get no results
However if I search
Jun 1, 2021@ 07:56:46 ->Jun 1, 2021@ 10:00:46 everything works fine

I think this is also why my detection rules are not working. Time on my computer is correct. Is it possible that time in Elastic is off? How do I fix t this ?

2

Hi again @farciarz121. Could you please check the Timezone for date formatting in your Kibana Advanced Settings and make sure it is set to browser:

Screen Shot 2021-06-01 at 2.52.02 PM
Screen Shot 2021-06-01 at 2.52.02 PM2086×320 33.9 KB

1 Like
3

This did the trick. Thank you @Stephmilovic.
Sorry I thought it did, I was looking at the wrong thing. Logs are still showing 16:51 it is 1:51pm here ...

1 Like
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.