Open gwtwod opened 3 years ago
Seems certain time modifiers are interpreted wrong in the Sandbox-repo, but they work fine in other repos.
| bucket(span=1min) over 7 days gives the warning using a span of 1minms results in 10080 buckets. Using the maximum of 1500
| bucket(span=1min)
using a span of 1minms results in 10080 buckets. Using the maximum of 1500
So it seems Humio interprets min as minms, and 1s is seen as 1sms.
min
minms
1s
1sms
Seems certain time modifiers are interpreted wrong in the Sandbox-repo, but they work fine in other repos.
Example
| bucket(span=1min)over 7 days gives the warningusing a span of 1minms results in 10080 buckets. Using the maximum of 1500So it seems Humio interprets
minasminms, and1sis seen as1sms.Screenshot