- Click on "New Search" button
- Click on "Edit criteria" the pencil icon
- Click on "Action Time" on the left menu
- Click on "BeginTime" under Action Time on the left menu
- Click in the "Value" box under BeginTime field has:
- Select yesterdays date
- Click Ok
- Click Ok
- Click Search

This error is returned: "Invalid search filter: Cannot parse '(sev:[0 TO
5]) AND (bgnt:1396278066000)': Expression bgnt:1396278066000 in Lucene
query is invalid. Field name 'bgnt' is invalid. See Search tips for
information on constructing valid queries."
I have tried the same with a beginning date of two days ago and an
ending date of yesterday with the same results.

Sentinel Version:

Any ideas?

dbenjamin's Profile: https://forums.netiq.com/member.php?userid=249
View this thread: https://forums.netiq.com/showthread.php?t=50414