Dashboard data table

[OkStandard123]

Hey, I am Looking for some help. I created a Dashboard in wazuh with a Data Table. in this data table i display relevant info like Agent Name, rule id and time. Here are the Problems i got with this:

If i display all agents at once, only a few are shown and i only have like 90 hits and those are only from the last 30-40 min. If i filter a few agents out, so that fewer agents are shown i have like 700 hits and those are from the last 2 Days (My start date is configured to show logs from the last two days to now).

If i Display all agents at once, the oldest hits are deleted. The result is, that i can only see the logs from the last 30-40min.

I hope someone can help me, thank you in advance!

[JuanGarriuz]

Hello @OkStandard123

It seems that the issue you're experiencing is related to the index configuration and how the data is being queried. You can try these different solutions:

• Verify that the time range in the dashboard is configured correctly. Make sure the date range is well-defined.
• In the table visualization settings, check the "Size" parameter that controls how many records are displayed.
• Ensure there are no pagination filters limiting the number of results.

Example