<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How are time zones handled in distributed searches? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-are-time-zones-handled-in-distributed-searches/m-p/10374#M342</link>
    <description>&lt;P&gt;Are queries that go to two index servers in different time zones handled correctly? I'm assuming it does, but want to be sure. Specifically, do queries get adjusted for the time zone they originate in and pull the right data according to the time zone the index servers are in? Also, does the gui adjust and handle the results appropriately coming back?&lt;/P&gt;</description>
    <pubDate>Sat, 20 Mar 2010 06:28:49 GMT</pubDate>
    <dc:creator>Alan_Bradley</dc:creator>
    <dc:date>2010-03-20T06:28:49Z</dc:date>
    <item>
      <title>How are time zones handled in distributed searches?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-are-time-zones-handled-in-distributed-searches/m-p/10374#M342</link>
      <description>&lt;P&gt;Are queries that go to two index servers in different time zones handled correctly? I'm assuming it does, but want to be sure. Specifically, do queries get adjusted for the time zone they originate in and pull the right data according to the time zone the index servers are in? Also, does the gui adjust and handle the results appropriately coming back?&lt;/P&gt;</description>
      <pubDate>Sat, 20 Mar 2010 06:28:49 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-are-time-zones-handled-in-distributed-searches/m-p/10374#M342</guid>
      <dc:creator>Alan_Bradley</dc:creator>
      <dc:date>2010-03-20T06:28:49Z</dc:date>
    </item>
    <item>
      <title>Re: How are time zones handled in distributed searches?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-are-time-zones-handled-in-distributed-searches/m-p/10375#M343</link>
      <description>&lt;P&gt;Timestamps are converted to UTC at index time. The events coming across distributed should be ordered correctly.&lt;/P&gt;</description>
      <pubDate>Sat, 20 Mar 2010 06:29:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-are-time-zones-handled-in-distributed-searches/m-p/10375#M343</guid>
      <dc:creator>matt</dc:creator>
      <dc:date>2010-03-20T06:29:27Z</dc:date>
    </item>
  </channel>
</rss>

