Forum Discussion
Yes, many a time I would love a next button to be able to move to the second page, but even then I know it would be quite slow.
At the moment, the best way is to either a)filter it down even more or b)export your events to S3/Azure Blob storage and use a faster method of searching native within S3/Azure Blob to search the events.
However, I am aware Cato are going to be making improvements to improve the events page fetch time, particularly when searching a time-frame over 2 weeks. I think part of the problem is that last year Cato started enriching the events with many more fields, such as 'Network Rule' or 'TLS Inspection Rule' which we weren't previously able to see. And this is slowing the event fetching down.
On balance, I am just now happy all these extra fields are exposed to us admins. We have been asking for it for years (literally 2 years), so a little deterioriation in performance in the interim is fine by me.
Related Content
- 2 months ago
- 2 months ago
- 20 days ago
- 6 days ago