https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-timestamp-from-ETC-TO-GMT/m-p/451182#M78247 <P>I have a source that sends data at UTC timezone but when coming into Splunk it comes as EST.How can I convert indexed data in GMT and run searches in GMT timezone </P> <P>Sample events -with timestamp</P> <PRE><CODE>19 Mar 2019 08:47:20,409 [INFO] (StreamHandler) private.com.amazonaws.services.datapipeline.runner.ApplicationRunner: [ERROR] 2019-03-19 08:47:20.409 [main] EdwEntryProgram$ - [EDH-Application-Exception] - Job ID 1068 FAILED </CODE></PRE> <P>Sample event-without TIMESTAMP</P> <PRE><CODE>[EDH-Application-Exception] - Job ID EDM_PRODUCT_AVAILABILITY failed at edm_datapipeline_status_check lambda function or datapipeline is in failed state. </CODE></PRE> Wed, 20 Mar 2019 16:47:47 GMT vrmandadi 2019-03-20T16:47:47Z https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-timestamp-from-ETC-TO-GMT/m-p/451182#M78247 <P>I have a source that sends data at UTC timezone but when coming into Splunk it comes as EST.How can I convert indexed data in GMT and run searches in GMT timezone </P> <P>Sample events -with timestamp</P> <PRE><CODE>19 Mar 2019 08:47:20,409 [INFO] (StreamHandler) private.com.amazonaws.services.datapipeline.runner.ApplicationRunner: [ERROR] 2019-03-19 08:47:20.409 [main] EdwEntryProgram$ - [EDH-Application-Exception] - Job ID 1068 FAILED </CODE></PRE> <P>Sample event-without TIMESTAMP</P> <PRE><CODE>[EDH-Application-Exception] - Job ID EDM_PRODUCT_AVAILABILITY failed at edm_datapipeline_status_check lambda function or datapipeline is in failed state. </CODE></PRE> Wed, 20 Mar 2019 16:47:47 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-timestamp-from-ETC-TO-GMT/m-p/451182#M78247 vrmandadi 2019-03-20T16:47:47Z https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-timestamp-from-ETC-TO-GMT/m-p/451183#M78248 <P>GMT and UTC are the same thing, are they not?</P> Wed, 20 Mar 2019 17:20:28 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-timestamp-from-ETC-TO-GMT/m-p/451183#M78248 bcyates 2019-03-20T17:20:28Z https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-timestamp-from-ETC-TO-GMT/m-p/451184#M78249 <P>I am sorry for the confusion.Yes they are same I want to convert them to gmt</P> Wed, 20 Mar 2019 17:27:00 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-timestamp-from-ETC-TO-GMT/m-p/451184#M78249 vrmandadi 2019-03-20T17:27:00Z https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-timestamp-from-ETC-TO-GMT/m-p/451185#M78250 <P>Click on your name at the top of the Splunk UI and select "Preferences". Choose "GMT" from the Time Zone dropdown and click Apply. You will now see times in GMT/UTC.</P> Wed, 20 Mar 2019 21:51:33 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-timestamp-from-ETC-TO-GMT/m-p/451185#M78250 richgalloway 2019-03-20T21:51:33Z https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-timestamp-from-ETC-TO-GMT/m-p/451186#M78251 <P>I did that one , The sample event which has timestamp is GMT timestamp but when coming into Splunk it is coming in as EST</P> Thu, 28 Mar 2019 14:42:27 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-convert-the-timestamp-from-ETC-TO-GMT/m-p/451186#M78251 vrmandadi 2019-03-28T14:42:27Z