I'm working on a script to pull logs from our firewall, and noticed that I'm unable to grab logs more than couple days ago from the current date. For example, I can see logs in the UI for a specific domain on 8/20, but querying with the API won't yield results that far back. Even when adding (time_generated leq 'some date here') to the query, it doesn't pull any results. Is there something I am missing regarding API settings in the firewall, or does the logging API not go back that far?
... View more