Hi,
I’m using the following query to search all the message from today’s 00:00 to 00:02 (only two minutes)
timestamp:[“now/d” TO “now/d+2m”]
However, the search result is complete wrong, it will give me way more than 2 minutes of data. Can you please tell me how to fix it? Thank you.