Set a time range in unified events

Set a time range in unified events to view firewall events for a specific period and control which events are displayed in the table.

When you change the time range, the unified events table automatically refreshes to reflect your changes. The time range that you select does not apply to other tables in the event viewer. For example, a time range that you select when viewing connection events does not apply to the unified events table and vice versa.

Note

If your selected time range exceeds the event retention period allowed by your license, it will automatically adjust to fit within the retention period.

Procedure

Step 1

Choose Events & Logs > Analysis > Unified Events.

By default, the unified events table displays events from the past hour.

Step 2

Click the current time range.

Step 3

Choose one of the following:

  • If you want to see events for a fixed time range, click Fixed Time Range and choose the Start time and End time.

    To set the current time as the End time, click Now.

  • If you want a sliding default time window (such as last one hour), select Sliding Time Range and specify the desired length.

    The table displays all the events generated from a specific start time—for example, the past hour—relative to the present. Refreshing the view ensures the window always displays events from the most recent hour of activity.

Step 4

Click Apply.