Change timezone props.conf

TheBravoSierra — Tue, 26 Jan 2021 22:43:14 GMT

Hi,

I need help adding a line in my props.conf file that will convert lastupdatedt time from UTC to Mountain time. Example extracted from an event below:

"lastupdatedt":"2021-01-26 11:32:46"

Thanks

Re: Change timezone props.conf

scelikok — Wed, 27 Jan 2021 03:24:00 GMT

Please try below;

[your_sourcetype] TIME_PREFIX = \"lastupdatedt\":\" TIME_FORMAT = %Y-%m-%d %H:%M:%S TZ = UTC