Skip to content
  • There are no suggestions because the search field is empty.

NetWitness - How to Reset a Historical Timeline Chart back to the Default Last 24h View

Issue

After changing the date ranges for a historical timeline chart, it does not automatically revert back to dynamically showing the last 24 hours again as it did originally when the page is refreshed.


Resolution

  1. To reset a historical timeline chart on the Stats page of a core appliance within the NetWitness UI, begin by clicking on the Settings button for the chart, as shown below.

    Settings
  2. On the Settings view, remove the value completely for Begin Date and End Date.
  3. Then, leaving the focus on the Begin Date field as shown below, click on the Settings button to return to the chart, which will reflect the change.

    User-added

    If you are unsure of any of the steps above or experience any issues, contact NetWitness Support and quote this article number for further assistance.

Notes

If the focus is left on the  End Date rather than the Begin Date when returning to the chart, a year-to-date view will be displayed, rather than the previous 24 hours.
It is recommended that this year-to-date view not be used because the underlying query can be taxing on the appliance.

Internal Comments

Article is still technically accurate, tested in 11.2.0.0.  Updated to reflect name change as well as for versions.


Product Details

NetWitness Product Set: NetWitness Platform
NetWitness Product/Service Type: Network Decoder, Log Decoder, Concentrator, Broker, Archiver
NetWitness Version/Condition: 11.x, 12.x
Platform: CentOS, AlmaLinux


Summary

Instructions for resetting a Historical Timeline Chart on the Stats page of a core appliance to dynamically display the last 24 hours.


Approval Reviewer Queue

Technical approval queue