A log query returns no results after a known incident. What should be verified before concluding no errors occurred?

1. Time range, timezone, source selection, query filters, retention, and ingest completeness.
2. That no results always establish perfect service health.
3. That a dashboard title can restore expired records.
4. Only whether the query text is short.