How do I resolve the Panther Data Replay error "No data in time range for the selected log types"?

Last updated
Save as PDF

Issue

When trying to run a Data Replay for a rule against a specified log type, the following error occurs: "No Data in time range for the selected log types"

I also see messages like "Last replay failed during evaluation" and "An error occurred while evaluating historical log data."

Resolution

Data Replay has time constraints, which are described in the documentation.

To resolve this issue:

Verify that the time range is within the last 30 days.
Verify that the time range is older than 24 hours.

Cause

This issue occurs if you do not follow the constraints specified in the Data Replay documentation.