The default global daterange within the SIEM App is the past 24hrs. For some users this time period may result in a large amount data, and thus either cause the app to timeout or be very slow on initial load. To mitigate this, we can provide an option within the Kibana Advanced Settings for configuring the default global daterange.
elasticmachine
commented
5 years ago
The default global daterange within the SIEM App is the past 24hrs. For some users this time period may result in a large amount data, and thus either cause the app to timeout or be very slow on initial load. To mitigate this, we can provide an option within the Kibana Advanced Settings for configuring the default global daterange.