https://dfarq.homeip.net/splunk-truncating-timecharts/