I have a problem about _time field. There is difference between event in time and _time field. Like below,
Wrong Time: 12/28/20 6:34:28 AM
Correct Time: 12/27/2020 07:34:28 PM
Do you have any idea about it?
There are a few possible explanations.
It fixed after setting ntp&reboot on Windows