Hi, i'm trying to get Splunk realtime results using splunk's python-sdk.
Everything works well, but in the results, there is a missing second : I don't know whether there is a limitation or if I missed a parameter in the query? This is really embarrassing.
Here's my python code :
And here are the results:
As you can see, the entire second : '2020-11-25T10:42:26' is missing, and will never appear in the results. Do you have any idea where this might come from?
I even tried to "manually" create a timechart using ' search index=_internal bin _time span=10ms | chart count by _time'; and this this case, there is a missing millisecond (not second ).
There is a missing second every 5-10 results
I can't figure out why this is not working properly.
