<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: couldn't recognize IDT time zone in timestamp extraction in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/couldn-t-recognize-IDT-time-zone-in-timestamp-extraction/m-p/302342#M57101</link>
    <description>&lt;P&gt;Consider adding &lt;CODE&gt;TZ_ALIAS = IST=GMT+02:00, IDT=GMT+03:00&lt;/CODE&gt; to your props.conf file.&lt;/P&gt;</description>
    <pubDate>Wed, 05 Apr 2017 15:23:17 GMT</pubDate>
    <dc:creator>richgalloway</dc:creator>
    <dc:date>2017-04-05T15:23:17Z</dc:date>
    <item>
      <title>couldn't recognize IDT time zone in timestamp extraction</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/couldn-t-recognize-IDT-time-zone-in-timestamp-extraction/m-p/302341#M57100</link>
      <description>&lt;P&gt;Hi  &lt;/P&gt;

&lt;P&gt;i am trying to  extract  time stamp   from a  log file &lt;BR /&gt;
the  time stamp  in the file  is&lt;BR /&gt;&lt;BR /&gt;
Mar 25, 2017 10:00:01 PM IDT &lt;BR /&gt;
and i am  using  that  Timestamp format  %b %d, %Y %H:%M:%S %p %Z &lt;/P&gt;

&lt;P&gt;but  Splunk couldn't recognize  IDT (Israel Daylight Time)   as  legal TimeZone&lt;BR /&gt;
&lt;A href="https://www.timeanddate.com/time/zones/idt"&gt;https://www.timeanddate.com/time/zones/idt&lt;/A&gt;   &lt;/P&gt;

&lt;P&gt;please  advise  &lt;/P&gt;</description>
      <pubDate>Wed, 05 Apr 2017 09:26:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/couldn-t-recognize-IDT-time-zone-in-timestamp-extraction/m-p/302341#M57100</guid>
      <dc:creator>barakharyati1</dc:creator>
      <dc:date>2017-04-05T09:26:56Z</dc:date>
    </item>
    <item>
      <title>Re: couldn't recognize IDT time zone in timestamp extraction</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/couldn-t-recognize-IDT-time-zone-in-timestamp-extraction/m-p/302342#M57101</link>
      <description>&lt;P&gt;Consider adding &lt;CODE&gt;TZ_ALIAS = IST=GMT+02:00, IDT=GMT+03:00&lt;/CODE&gt; to your props.conf file.&lt;/P&gt;</description>
      <pubDate>Wed, 05 Apr 2017 15:23:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/couldn-t-recognize-IDT-time-zone-in-timestamp-extraction/m-p/302342#M57101</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2017-04-05T15:23:17Z</dc:date>
    </item>
  </channel>
</rss>

