This has happened enough times that I'm finally posting about it. This is LEM 5.6 VM, upgraded just this week.
Nearly 100% of the time, when I try to narrow my first Ndepth search, I am told that there are No Matching Results Found, even though the Refine Fields column on the left shows result for that host. Here is an example:
1) Login to LEM, go to Explore > Ndepth. Ndepth automatically pulls up the last 10 minutes of events.
2) See that ServerX has 546 events. (Or there a UserLogoff events numbering 7,442 or whatever. It doesn't seem to matter.)
3) Drag the criteria up to the search bar and click the Play button.
4) Pull hair out when you're told there are No Matching Results Found.
5) Repeat process, this time results appear.
Has anyone else seen this behavior or know how to fix it?
