https://community.splunk.com/t5/Getting-Data-In/Can-I-specify-TimeZone-TZ-by-Index/m-p/124098#M25597 <P>In my props.conf I know I can change:<BR /> $SPLUNK_HOME/etc/system/local/<BR /> and add:<BR /> [source::xyz123]<BR /> TZ=US/Eastern<BR /> or by host instead of source. However, can I specify TZ by index? something like this:<BR /> [index::AllYourBase]<BR /> TZ=US/Eastern</P> <P>Many Thanks!</P> Tue, 08 Apr 2014 13:26:36 GMT hagjos43 2014-04-08T13:26:36Z https://community.splunk.com/t5/Getting-Data-In/Can-I-specify-TimeZone-TZ-by-Index/m-p/124098#M25597 <P>In my props.conf I know I can change:<BR /> $SPLUNK_HOME/etc/system/local/<BR /> and add:<BR /> [source::xyz123]<BR /> TZ=US/Eastern<BR /> or by host instead of source. However, can I specify TZ by index? something like this:<BR /> [index::AllYourBase]<BR /> TZ=US/Eastern</P> <P>Many Thanks!</P> Tue, 08 Apr 2014 13:26:36 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-specify-TimeZone-TZ-by-Index/m-p/124098#M25597 hagjos43 2014-04-08T13:26:36Z https://community.splunk.com/t5/Getting-Data-In/Can-I-specify-TimeZone-TZ-by-Index/m-p/124099#M25598 <P>Sorry, that is not possible.</P> Wed, 09 Apr 2014 05:10:34 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-specify-TimeZone-TZ-by-Index/m-p/124099#M25598 lguinn2 2014-04-09T05:10:34Z https://community.splunk.com/t5/Getting-Data-In/Can-I-specify-TimeZone-TZ-by-Index/m-p/124100#M25599 <P>Darn. Thanks for answering though!</P> Wed, 09 Apr 2014 10:42:15 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-specify-TimeZone-TZ-by-Index/m-p/124100#M25599 hagjos43 2014-04-09T10:42:15Z