Visualization time off

I have created a visualization table that pulls firewall logs. The strange thing is though the "15 minute increment" shows data that that "last 7 days" does not?

It depends on what table you created. By default, an aggregation like Terms will only show the Top 5 results in the time range, so it's entirely possible that in the last 15 minutes you have data that is not in the Top 5 of the last 7 days.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.