As a cybersecurity analyst, you often need to search for events matching specific filters when investigating incidents or performing threat hunting.

When you do, it is important that you get relevant search results as fast as possible so that you can spend your time performing analysis rather than waiting.

With that in mind, we deployed several modifications that should greatly improve your experience:

• The histogram and the event counts directly contain all results and are no longer limited to 100 000 events.
• Events are displayed in reverse chronological order
• You can now "zoom in" by selecting a time range in the histogram
• Search results are now kept for 30 minutes by default

If you want to get more information about events search, you can have a look at our associated documentation.