Forum Discussion

MaheshMJ's avatar
MaheshMJ
Icon for Joining the Conversation rankJoining the Conversation
10 months ago

Event logs limited to 100 events only

On theevents page in CMA, only the most recent 100 events are visible. Srolling though earlier events is not available. In order to search for earlier events you need to set filters, and even then on...
p_wegnerowski's avatar
p_wegnerowski
Icon for Making Connections rankMaking Connections
10 months ago

I can't imagine how slow the CMA page would be if you show more than 100 Events there. Remember that you can always export the Events from your current filter to csv file. I just tested - my filter was showing 473K of events, but when I exported them to CSV, the file contained only 250k of events (not sure if this is CATO limit).
When I need to deep dive into a higher number of events, I usually use the "fields" pane on the left to check e.g. top domains, top src/dst IP, top applications etc. and then filter on what I'm interested about.

  • Nath's avatar
    Nath
    Icon for Staying Involved rankStaying Involved
    9 months ago

    Correct, the 250K export limit is a Cato limit.