https://community.splunk.com/t5/Getting-Data-In/How-do-you-display-multiple-timezones-corrected-for-daylight/m-p/385922#M69280 <P>How do you display multiple timezones corrected for daylight savings from a correct epoch time?</P> Tue, 12 Feb 2019 16:40:47 GMT landen99 2019-02-12T16:40:47Z https://community.splunk.com/t5/Getting-Data-In/How-do-you-display-multiple-timezones-corrected-for-daylight/m-p/385922#M69280 <P>How do you display multiple timezones corrected for daylight savings from a correct epoch time?</P> Tue, 12 Feb 2019 16:40:47 GMT https://community.splunk.com/t5/Getting-Data-In/How-do-you-display-multiple-timezones-corrected-for-daylight/m-p/385922#M69280 landen99 2019-02-12T16:40:47Z https://community.splunk.com/t5/Getting-Data-In/How-do-you-display-multiple-timezones-corrected-for-daylight/m-p/385923#M69281 <P>Create a macro to calculate the new time using UTC offsets. Create another macro to calculate the correct UTC offset based on the time of year for Daylight Savings:</P> <PRE><CODE> eval date_year=strftime(_time,"%Y"),date_mon=strftime(_time,"%m"),date_day=strftime(_time,"%e"),date_hour=strftime(_time,"%H"),date_min=strftime(_time,"%M"),date_sec=strftime(_time,"%S"),date_tz=strftime(_time,"%:::z"),date_tz_offset="+11",date_doy=strftime(_time,"%j"),date_hour_new=(date_hour-date_tz+date_tz_offset)%24,date_day_new=date_day+floor((date_hour-date_tz+date_tz_offset)/24),date_new=date_year."-".date_mon."-".date_day_new." ".date_hour_new.":".date_min.":".date_min." UTC".date_tz_offset,date=date_year."-".date_mon."-".date_day." ".date_hour.":".date_min.":".date_min." UTC".date_tz </CODE></PRE> Tue, 12 Feb 2019 16:42:31 GMT https://community.splunk.com/t5/Getting-Data-In/How-do-you-display-multiple-timezones-corrected-for-daylight/m-p/385923#M69281 landen99 2019-02-12T16:42:31Z