Retention is always based/calculated on receipt time regardless of what is parsed out for message time.
- Live Dashboard says "No Data to Display" but running the interactive query returns results
- If we use the Save To Index feature for alerting, what is the retention period for the same index?
- How can I store data for longer than my retention period?
- The Live Tail feature is not working. Pressing "Run" does not do anything.
- Search API request fails with "HTTP ERROR 401 Full authentication is required to access this resource"