topic Re: Search results always appear with american style dates in Splunk Enterprise

Search results always appear with american style dates

gavinsopra — Sun, 07 Jun 2020 03:28:30 GMT

I am running Splunk Enterprise 8.0.2 on my Windows 10 PC (at home obviously [COVID-19 etc]) and using Chrome 81. I am UK based and everything is configure for the UK.
I am pulling in log files in which each line starts with date and time in UK format, e.g.

2020-03-27 00:04:18 Syncapp 01234 info [varying rubbish] : Started sync 'SyncGroup01::SyncJob11'

Whenever I search for these events the 'Time' field always gives the date in US style, as seen below.

Changing the "Preferences->Timezone" setting doesn't seem to have any impact. Is there a way to make Splunk understand that I am in the UK and display UK style dates by default?

Re: Search results always appear with american style dates

PavelP — Wed, 22 Apr 2020 14:57:22 GMT

Hello @gavinsopra,
please check the splunk URL contains http://splunk:8000/en-US or en-UK. The settings can be configured in chrome > settings > languages - move english (united kingdom) to the top of the language list.

let me know if it worked

Re: Search results always appear with american style dates

gavinsopra — Wed, 22 Apr 2020 15:19:32 GMT

Sorry, I should have said...
I read this answer link text

and tried all the things suggested.
My URL does start 'http://localhost:8000/en-GB/app/search/...' and Chrome is configured for "English (United Kingdom)".

Re: Search results always appear with american style dates

richgalloway — Wed, 22 Apr 2020 17:02:53 GMT

Maybe I need new glasses, but I'm seeing 31/03/2020 in the Time column. Since there are not 31 months in a year, it must be dd/mm/yyyy (UK) format.

Re: Search results always appear with american style dates

gavinsopra — Thu, 23 Apr 2020 08:00:02 GMT

Apologies, you are right. I've spent too much time working on applications where dates are always YYYY-MM-DD and got myself confused.
I'll try and ask more intelligent questions in the future.

I don't appear to be able to 'Accept' your comment as the answer so i'm not sure how to close this thread.