I have 60*24 =1440 records in my saved search, which mean every minutes have 1 record. |bin _time span=1m
some things like these in _time column
8/26/2022 11:30:40am
8/26/2022 11:30:41am
I connected my splunk data to tableau, but all the datetime in 1440 records changed to 8/26/2022 12:00:00am if i use extract mode in tableau, does anyone face the same issue before?
