Rather than the live, continuous monitoring of a large enterprise network, our use case is one of performing regular weekly audits on many closed (air-gapped) LANs, relying heavily on about 50 saved (nDepth) searches. These custom searches are currently saved with the "One Week" time frame. However, our audits may vary through the week so this method may not always include all the days in the audit period. The option for custom time frame (ie. Dec. 10 - Dec. 20) is not feasible since we would have to change this for every search, every week. We need the ability to further customize the time frame for these searches, including options for 10 days, 2 weeks, 1 month etc. We also need the ability to globally change all nDepth searches to a given custom time frame without having to set them individually.
