With the introduction of NTA 4.0 we provided users with the ability to have access to 1-minute date for 30+ days depending on your disk size and flows per second you were collecting. While this is great, we see customers experiencing performance issues trying to query several days or weeks of 1-min data.
I am looking to get a general time frame or "sliding window" that would be acceptable to have access to the 1-min data and for all other request, begin to leverage rollup data for longer time frames to reduce the amount of data needed to be parsed per request