From the Historical Events viewer, it is evident that the oldest 500 events are returned while I am querying with <AgentName> in the search bar and I can see more no of events found indicated at the bottom left hand corner of the viewing pane. While I am searching with <type:errorsnapshot>/<errorsnapshot> in the query pane the oldest 500 error events are getting returned from all the agents.
I need to get error happened under a particular agent for last 1 week. How can I search for this? Can anybody help?
Also want to know whether the no if events returned after querying historical events can be modified or not. If yes how?