Well, the issue with that is we may not know what node the dates would be referencing unless we were able to see the name field of the detail.

That query works if the detail nodes haven't been deleted and still exist. Remember, we're tracking listening ports with these nodes and the issue is getting the nodes that may have been created and then deleted because a port started listening and at some point stopped maybe because the service or application was uninstalled.

So, if a detail node is created and then destroyed, will Discovery still keep history on that node if another one is created with the same key using the same text for the name field? For instance, a port starts listening and then stops but later on starts listening again. Would we be able to see that? Also, thank you for the help so far.

Looks like the limitation here is going to be for nodes that were destroyed over a year ago. They simply don't exist anymore and can't provide information. These are the ones we were having problems finding.