The Time Field

In the Time field, you can enter absolute and relative time ranges.

You can also search based on Bloks.

From the Search tab, enter the time period in the Time field and click . For details on how to add a new time Blok or use the existing Blok, see Time Bloks.

Note: All dates and times are defined in the local time zone of the appliance rather than being based on the client system time zone.

For example, enter -5h to retrieve all events that occur in the last 5 hours.

Note: The Time field must be empty when using infrastructure search queries.

An example of invalid infrastructure search query is: 

use LogLogic_Config_Bloks | sys_eventTime in -5d