Drill into a domain
Choose a granularity (for example, hourly vs. daily) to match the investigation you're doing
You can also control how finely the data is broken down, for example hour-by-hour instead of day-by-day.
Finer granularity is useful when you're trying to pin down exactly when something unusual happened.