Hello everyone,
I have a self-service dashboard running in our Splunk Cloud V6.2 environment which displays indexed amount over time from a summary index that's populated by a saved search. Users have noticed that the chart seems to be sorting by month & day but ignoring year. Is this related to the latest date processing bug that was identified at the end of last year? I went through the remediation steps but maybe something was missed.
I am using this search:
index=corp_splunk_license_details $index_tok$ | eval Volume_gb = round(volume_gb,3) | chart sum(Volume_gb) as "Amount Indexed (GB)" by day, orig_index
