Investigate Time Before Selected Time

[#1]

Greetings All,

   I've been out of the QlikView world for quite some time, and haven't kept up my skill as well as I'd have liked (in retrospect, heh). I'm struggling to solve a problem that I'm sure I've solved before using set analysis with advanced search expressions. Memory of syntax isn't serving as well as memory of event, however.

So, here's the basic problem. I have very verbose log files that I'm analyzing. There's an event that occurs regularly that I'm trying to investigate. The event itself is not as interesting as the set of events that occur directly preceeding it. How do I select the preceeding events (say 5 minutes preceeding, or 100 events preceeding) given the events themselves?

Below is my basic data schema, by way of Load+Select statement:

LOAD EventLog,
    RecordNumber,
    TimeGenerated,
    TimeWritten,
    EventID,
    EventType,
    EventTypeName,
    EventCategory,
    EventCategoryName,
    SourceName,
    Strings,
    ComputerName,
    SID,
    Message,
    Data;
SQL SELECT *
FROM BrokenAnalysis.dbo.localSysLog;
//-------- End Multiple Select Statements ------
TimeLink:
LOAD TimeGenerated
  ,MakeDate(Year([TimeGenerated]),Month([TimeGenerated]),Day([TimeGenerated]))
  +MakeTime(Hour([TimeGenerated]),Minute([TimeGenerated])) As TSLink
RESIDENT EventLog;

[#2]

check peek() function in load script

or send sample file with object (chart?) you are talking about