All,
Is there a way to view events for a time period more granular than one hour? From what I can see, the time filters only work on an hourly basis. I may have multiple thousands of events for any given hour.
For example, if I want to view all events that occurred between 9:00 and 9:05, but 50,000 events were generated between 9:00 and 10:00, I'll never see the earlier events. I know I can adjust the number of rows or events displayed, but this seems a little clumsy. Any other ideas?
Thanks,
--
Marc Soda, CISSP
Information Security Engineer
NCO Group
215.441.2127
[EMAIL PROTECTED]
