AnsweredAssumed Answered

Slow queries

Question asked by Sean Koniarz on Nov 19, 2013
Latest reply on Nov 19, 2013 by Chris Thomas

I know that SA is suppose to be fast but I seem to be doing a lot of waiting. 

 

When I try to query for 45 minutes worth of log data in the investigation module for one device type it is taking forever to load. 

 

The type I am trying to query is rhlinux and I only have 580k events in that one section of time, is there a reason it is taking so long to query?  20+min. 

Outcomes