Hello every body I have been struggling with a serious problem recently  my splunk version is 7.2  when I use  span Command (with tstats or bin ) , it starts from half hour ! instead of hour for example : | tstats count as count from datamodel=Log where Log.FinalStatus!=61  by  _time span=1h I have picture below as result , while I want time sections like 10 , 11, 12 ...   what should I do ?? Thank you ... View more