https://community.splunk.com/t5/Getting-Data-In/Hong-Kong-Timezone-HKT-not-being-recognised/m-p/127283#M26186 <P>If I index an event with</P> <PRE><CODE>2015-05-20 19:10:01.132 HKT This is an event in Hong Kong Time Zone </CODE></PRE> <P>The timezone will not be recognized. If instead the event is </P> <PRE><CODE>2015-05-20 19:10:01.132 HongKong This is an event in Hong Kong Time Zone </CODE></PRE> <P>The timezone will be recognized. However the HKT is commonly used across my devices. How do I get Splunk to recognize HKT?</P> Tue, 26 May 2015 11:24:08 GMT mzorzi 2015-05-26T11:24:08Z https://community.splunk.com/t5/Getting-Data-In/Hong-Kong-Timezone-HKT-not-being-recognised/m-p/127283#M26186 <P>If I index an event with</P> <PRE><CODE>2015-05-20 19:10:01.132 HKT This is an event in Hong Kong Time Zone </CODE></PRE> <P>The timezone will not be recognized. If instead the event is </P> <PRE><CODE>2015-05-20 19:10:01.132 HongKong This is an event in Hong Kong Time Zone </CODE></PRE> <P>The timezone will be recognized. However the HKT is commonly used across my devices. How do I get Splunk to recognize HKT?</P> Tue, 26 May 2015 11:24:08 GMT https://community.splunk.com/t5/Getting-Data-In/Hong-Kong-Timezone-HKT-not-being-recognised/m-p/127283#M26186 mzorzi 2015-05-26T11:24:08Z https://community.splunk.com/t5/Getting-Data-In/Hong-Kong-Timezone-HKT-not-being-recognised/m-p/127284#M26187 <P>This is a known issue which will be solved with Splunk 6.2.4</P> <P>There is an easy workaround to have this working on the current release:</P> <PRE><CODE>1. mkdir $SPLUNK_HOME/share/splunk/zoneinfo 2. ( Assuming the Indexer is a Linux box ) cp /usr/share/zoneinfo/Hongkong $SPLUNK_HOME/share/splunk/zoneinfo/HKT 3. Restart Splunk. </CODE></PRE> <P>And it will recognize the HKT timezone correctly.</P> Tue, 26 May 2015 11:25:26 GMT https://community.splunk.com/t5/Getting-Data-In/Hong-Kong-Timezone-HKT-not-being-recognised/m-p/127284#M26187 mzorzi 2015-05-26T11:25:26Z