Skip to content

Commit cb601f2

Browse files
authored
Update docs/manage/security/audit-indexes/search-audit-index.md
1 parent 7dabd7a commit cb601f2

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docs/manage/security/audit-indexes/search-audit-index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ The following table provides details on the fields returned by the index:
5959
| `content_identifier` | The ID of the content item that triggered the search query. |
6060
| `content_name` | The name of the content item that triggered the search query. |
6161
| `data_retreived_bytes` | Amount of data retrieved by the search query. This represents the approximate size of messages that match the source expression of the query and are retrieved from scanning. |
62-
| `data_scanned_bytes` | Displays the total sum of scanned bytes for charged (Flex and Infrequent bytes) and non-charged metering types (Continuous, Frequent, and FlexSecurity bytes). This value can be different from what users see in scan estimates on UI. Additionally, if a query contains a `timecompare` or `subquery` operator, the `data_scanned_byte` attribute in the audit log will include the sum of both the parent and child queries. |
62+
| `data_scanned_bytes` | Displays the total sum of scanned bytes for charged (Flex and Infrequent bytes) and non-charged metering types (Continuous, and Frequent bytes). This value can be different from what users see in scan estimates on UI. Additionally, if a query contains a `timecompare` or `subquery` operator, the `data_scanned_byte` attribute in the audit log will include the sum of both the parent and child queries. |
6363
| `execution_duration_ms` | Time taken to complete the search. |
6464
| `is_aggregate` | The boolean variable that indicates if the corresponding search query was an aggregate query. The aggregate operator’s list can be found in [Group or Aggregate Operators](/docs/search/search-query-language/group-aggregate-operators). |
6565
| `query` | The query text string run by the user. |

0 commit comments

Comments
 (0)