topic Re: 7.1 Dashboards not converting timepicker to timezone in Dashboards & Visualizations

7.1 Dashboards not converting timepicker to timezone

ryipea — Fri, 10 Aug 2018 18:13:53 GMT

I'm having two problems with splunk dashboards after I upgraded to 7.1.2. These only seem to occur when searching Date range or date-time range on dashboards. Making a custom search returns correclty. Relative time also works fine.

Dashboards are using the searching computer's timezone as a base.
Dashboards aren't converting the shared timepicker based on the timezone

I made 2 accounts, account A in my computer's local time (PST, -7 hrs since daylight savings) and account B in my splunk server's time (GMT).

I make a timerange search since today (date range, since today) on my local computer. Account A returns from midnight (as expected) while account B returns from 7:00AM (PST as base time). in the URL the epoch time for both searches is the same, midnight PST epoch.
I make a timerange search since today (date range, since today) on my splunk server. Account A returns from 5PM the previous day (GMT as base time) while account B returns from midnight (as expected). in the URL the epoch time for both searches is now midnight GMT epoch.

I've been looking into this for several days and I'm led to believe its a bug with splunk as I have another splunk host (unrelated to this instance, different data) which is still on 6.3 and the dashboard timeranges work correctly as expected. Help would be appreciated.

Re: 7.1 Dashboards not converting timepicker to timezone

jcrabb_splunk — Tue, 28 Aug 2018 13:08:34 GMT

I was able to reproduce it easily. Looking internally I did find a bug which matches this description, SPL-157014. As soon as I have some information on that to share, I will update you. Thanks!

UPDATE

This is scheduled to be fixed in:

7.1.6 - SPL-163030
7.2.4 - SPL-163032

I am not aware of a work around.

Re: 7.1 Dashboards not converting timepicker to timezone

tdkeinoda — Tue, 06 Nov 2018 15:40:29 GMT

Do you have any update? I also have the same issue with v7.2.0. Hope this will be fixed soon!

Re: 7.1 Dashboards not converting timepicker to timezone

jcrabb_splunk — Tue, 06 Nov 2018 16:48:55 GMT

Development is actively working on the issue. I do not have a fix version or ETA at this time. As soon as I do, I will provide an update.

Re: 7.1 Dashboards not converting timepicker to timezone

jcrabb_splunk — Mon, 19 Nov 2018 15:30:06 GMT

I wanted to let you know that the fix for this is currently scheduled for 7.1.5 and 7.2.3. That of course is subject to change but if testing goes well that is when you should see the fix. Thanks!

Re: 7.1 Dashboards not converting timepicker to timezone

skomaravelli — Wed, 21 Nov 2018 05:54:19 GMT

@jcrabb,
Is there a way around to this problem ? I have a dashboard which has a timepicker. i save the time picked to a token and use it in different search. This dashboard is used from offices across globe so adjusting the time difference in epoch format is not an answer for me.

Re: 7.1 Dashboards not converting timepicker to timezone

dineshraj9 — Tue, 04 Dec 2018 07:44:14 GMT

@jcrabb_splunk - Is there a workaround available until the new version comes out?

When are the new versions scheduled for rollout?

Re: 7.1 Dashboards not converting timepicker to timezone

AKG1_old1 — Fri, 04 Jan 2019 12:08:55 GMT

Hi, I am hitting the same problem. do we have any update on this ? 7.2.3 version is out but don't think it has this fix. Thanks!!

Re: 7.1 Dashboards not converting timepicker to timezone

jcrabb_splunk — Fri, 04 Jan 2019 13:16:26 GMT

I apologize, when I was out on holiday it looks like this got moved to 7.2.4. I have updated my answer and put in the bug #. They should be listed in the release notes once its available. If there are further changes I will update it once I am aware.

Re: 7.1 Dashboards not converting timepicker to timezone

robertlynch2020 — Fri, 04 Jan 2019 13:45:58 GMT

Do you have an ETA for 7.2.4 as i am also waiting on this fix before i upgrade

Cheers
Robert Lynch

Re: 7.1 Dashboards not converting timepicker to timezone

AKG1_old1 — Fri, 04 Jan 2019 14:05:38 GMT

@jcrabb_splunk : Thank you for update 🙂

Re: 7.1 Dashboards not converting timepicker to timezone

maniu1609 — Tue, 29 Jan 2019 15:24:09 GMT

Do we have same issue in 7.1.4 version?

Re: 7.1 Dashboards not converting timepicker to timezone

jcrabb_splunk — Tue, 29 Jan 2019 15:36:51 GMT

Yes, it is fixed in 7.1.6 and 7.2.4. 7.1.6 is currently available, 7.2.4 should be out in the next couple of weeks as far as I know.

Re: 7.1 Dashboards not converting timepicker to timezone

maniu1609 — Wed, 30 Jan 2019 08:11:18 GMT

Thanks @jcrabb_splunk

Re: 7.1 Dashboards not converting timepicker to timezone

woodcock — Wed, 18 Mar 2020 17:16:18 GMT

I have a workaround for this problem but first the background.

In my experience, this only happens when using - Default System Timezone -. Every user's Time zone preference setting starts out with a default value of - Default System Timezone -. This setting means that Splunk is supposed to use the OS's TZ setting that is running the Search Head. This works properly MOST of the time but DOES NOT work when you are inside of a Dashboard. In that case, it behaves as though the setting was set to (GMT) Greenwhich Mean Time. In our case the OS was set to (GMT-08:00) Pacific Time (US & Canada).

So the workaround is to use any other explicit setting for your Time zone preference setting.

Re: 7.1 Dashboards not converting timepicker to timezone

woodcock — Wed, 18 Mar 2020 17:16:57 GMT

See my answer for a workaround.