Hi,
I have two scheduled searches that run every 1 hour with retroactive time interval (earliest = -1h). I need to perform a comparison if a certain condition occurs within this range, so I have to increase the retroactive time (earliest = -24h), but still keep the condition of the events that occurred within the 1 hour interval. How do I do this?
Hi,
It works, tks.
Rodrigo Ribeiro