Long term data analysis options

[Zq2LpWRysF]

I do a weekly scan through the logs using 'long term data / query log' and look for suspicious domains that slipped through. I'll generally try and filter using things like 'geo', 'location', 'telemetry', 'ads', etc. but that can generate a very long list with a lot of repeated domains, e.g. thousands to watson.telemetry.microsoft.com. What would make this so much easier would be a way to show only unique domains from the filter, perhaps with a counter showing the actual hit count?

Another useful feature would be a way to jump to a specific time window, e.g. +/- 10 seconds, from a given entry in the filtered list. That could help isolate the surrounding context of the query and give some insight into which site or application might have instigated it.

Hopefully it's ok to put these in the same suggestion. Thank you for all your hard work on this amazing project.

[yubiuser]

The first request is covered by

Unique domain names per interval in the long-term database

Could you please add "in the long-term database" to the titel? This would make it easier for others to see the difference between your FR and this one:

and

Filter Out Duplicate Domains From Query Log

Can you please add an option to filter out duplicate domains from the query log section. Because it can often be difficult to analyze the logs with so many duplicate entries. Thanks

I would like to ask you to remove the first part of your FR and keep just the wish for a way to jump to a specific time window. Please rename the title accordingly.

[Zq2LpWRysF]

Ok, can do. Sorry for the slow reply. I log in seldomly and post even less frequently! I couldn't see an option to edit my post title so I created a new one and I'll just delete this. I think it's pending approval though.

[yubiuser]

Thanks.