- Search Overview
- Search Home Page
- Performing Searches
- Basic Search
- Advanced Search
- Advanced Search Building Blocks
- Running an Advanced Search Query
- Query Syntax
- Query by Subject
- Query by Vendor and Product
- Query by Field and Value
- Query by Context Table
- Query Using Regex
- Query Using Wildcards
- Free Text Search
- Query Using Advanced Query Language Operators
- Query Using Aggregation Functions
- Query Using Structured Fields
- Dynamic Field Extraction
- Natural Language Search
- Anomaly Search
- Refine a Search
- Context Tables in Search
- Search Best Practices
- Search Results
- Histogram View of Search Results
- Search Results Navigation Bar
- Timeline View of Search Results
- List View of Search Results
- Table View of Search Results
- Aggregated Search Results
- Event Details
- Detection Details
- Entity Details
- Data Insights
- Export Search Results
- View and Download Exported Search Result Files
- Dashboard Visualizations
PrevNext
Search Time Range Limits
As a best practice for configuring the query time range in a search, use the smallest or most specific time range possible to achieve your desired results. Keep in mind that larger time ranges are more costly in both performance and computational resources. To maintain the stability of the system, Exabeam doesn't permit unlimited query time ranges. For each environment, a license-specific limit is defined for query time ranges.
If your search time range is so large that it violates the limit specified for your environment, a message is displayed informing you of the time range limit. As a work around, you can run multiple queries with reduced time ranges.