https://community.splunk.com/t5/Getting-Data-In/I-can-not-set-the-timezone/m-p/57607#M11264 <P>Hello</P> <P>To set a staza by sourcetype you only need to type the sourcetype name, like:</P> <P>[sourcetype_VG]</P> <P>regards</P> Fri, 07 Jun 2013 09:21:44 GMT gfuente 2013-06-07T09:21:44Z https://community.splunk.com/t5/Getting-Data-In/I-can-not-set-the-timezone/m-p/57606#M11263 <P>Hi.<BR /> With some network devices to the server Splunk receives syslog-events. Time on these devices is set to GMT. Events come to a time shift at 4:00. Identified these events as a separate sourcetype - sourcetype_VG.</P> <P>Prescribed in props.conf:</P> <P>[sourcetype::sourcetype_VG]</P> <P>TZ = UTC</P> <P>No changes over time is not happening.</P> <P>I would be glad of any help!</P> Fri, 07 Jun 2013 09:10:57 GMT https://community.splunk.com/t5/Getting-Data-In/I-can-not-set-the-timezone/m-p/57606#M11263 imoskal 2013-06-07T09:10:57Z https://community.splunk.com/t5/Getting-Data-In/I-can-not-set-the-timezone/m-p/57607#M11264 <P>Hello</P> <P>To set a staza by sourcetype you only need to type the sourcetype name, like:</P> <P>[sourcetype_VG]</P> <P>regards</P> Fri, 07 Jun 2013 09:21:44 GMT https://community.splunk.com/t5/Getting-Data-In/I-can-not-set-the-timezone/m-p/57607#M11264 gfuente 2013-06-07T09:21:44Z https://community.splunk.com/t5/Getting-Data-In/I-can-not-set-the-timezone/m-p/57608#M11265 <P>Tried - no change.</P> Fri, 07 Jun 2013 09:29:40 GMT https://community.splunk.com/t5/Getting-Data-In/I-can-not-set-the-timezone/m-p/57608#M11265 imoskal 2013-06-07T09:29:40Z