Best Practices
- Limit your scans to the smallest timeframes possible. The less data that needs to be scanned, the faster the response will be. Furthermore, you will spend less of your quota.
- Use
contains(see Operators) with smaller timeframes. - Periodically pulling batches of all records (or a big subset) is possible, but not the recommended approach.
Search response time
Search metadata via the Audit Trail API becomes available in 15-minute sequences. In other words, if you've searched on 15:46:00 UTC, then metadata will be updated and available at 16:02:00. If you've searched at 16:14:00 UTC, then the metadata will be updated and available at 16:17:00. Otherwise, the response will contain the previous cached value.