https://community.splunk.com/t5/Getting-Data-In/How-to-set-time-zone-of-logs-by-source/m-p/476264#M81759 <P>I’m trying to specify that logs from a certain source coming from a UF are UTC. This should be pretty straightforward, however the following props.conf on the indexers does not work. </P> <PRE><CODE>[source::c:\\path\\to\\logs\\*] TZ = Etc/UTC </CODE></PRE> <P>I’ve tried a .* at the end of the file path and many other variations, nothing works as it should according to the props.conf.spec. </P> <P>Any ideas?</P> <P>Thanks</P> Tue, 07 Jan 2020 19:57:59 GMT ehowardl3 2020-01-07T19:57:59Z https://community.splunk.com/t5/Getting-Data-In/How-to-set-time-zone-of-logs-by-source/m-p/476264#M81759 <P>I’m trying to specify that logs from a certain source coming from a UF are UTC. This should be pretty straightforward, however the following props.conf on the indexers does not work. </P> <PRE><CODE>[source::c:\\path\\to\\logs\\*] TZ = Etc/UTC </CODE></PRE> <P>I’ve tried a .* at the end of the file path and many other variations, nothing works as it should according to the props.conf.spec. </P> <P>Any ideas?</P> <P>Thanks</P> Tue, 07 Jan 2020 19:57:59 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-set-time-zone-of-logs-by-source/m-p/476264#M81759 ehowardl3 2020-01-07T19:57:59Z