You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The Charts within the Explorer view are great for a quick high level overview of the events a query returned. If I have multiple timelines enabled and perform a query, it'd be useful to have a chart indicating how many results were found in each of those timelines (or those which results were found in).
Since a hostname/IP address won't always be available within the events of a timeline, this would be a good way of quickly seeing how much activity a specific system had (or activity found on with a query) if each system had its own timeline uploaded.
The text was updated successfully, but these errors were encountered:
The Charts within the Explorer view are great for a quick high level overview of the events a query returned. If I have multiple timelines enabled and perform a query, it'd be useful to have a chart indicating how many results were found in each of those timelines (or those which results were found in).
Since a hostname/IP address won't always be available within the events of a timeline, this would be a good way of quickly seeing how much activity a specific system had (or activity found on with a query) if each system had its own timeline uploaded.
The text was updated successfully, but these errors were encountered: