https://community.splunk.com/t5/Splunk-Search/How-do-I-add-the-time-zone-after-the-time-in-the-field/m-p/600026#M208869 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/241633">@Veeru</a>&nbsp;</P><P>if it resolved your issue can you please accept the solution it might help others in the group</P><P>&nbsp;</P><P>note:- <SPAN>If it helps karma is appreciated/if it resolves acceptance as solution is appreciated&nbsp;</SPAN></P> Wed, 01 Jun 2022 08:14:11 GMT venky1544 2022-06-01T08:14:11Z https://community.splunk.com/t5/Splunk-Search/How-do-I-add-the-time-zone-after-the-time-in-the-field/m-p/599838#M208789 <P>Hello,<BR />Good Day!</P> <P>I having the values in the field Data As shown below</P> <TABLE> <TBODY> <TR> <TD width="293.938px" height="25px"> <DIV class="">2022-05-31 10:18:09&nbsp; &nbsp;emea&nbsp;&nbsp;</DIV> </TD> </TR> <TR> <TD width="293.938px" height="47px"> <DIV class="">2022-05-31</DIV> <DIV class="">2022-05-31 10:18:14&nbsp; &nbsp; apac&nbsp;</DIV> </TD> </TR> <TR> <TD width="293.938px" height="47px"> <DIV class="">2022-05-31</DIV> <DIV class="">2022-05-31 10:18:20&nbsp; &nbsp; &nbsp;us&nbsp;</DIV> </TD> </TR> </TBODY> </TABLE> <P>I want to show the time zone as well like if emea comes after time it should show CST<BR />Output should be as follows:</P> <TABLE width="292px"> <TBODY> <TR> <TD width="291px" height="25px"> <DIV class="">2022-05-31 10:18:09 CST&nbsp; emea&nbsp;&nbsp;</DIV> </TD> </TR> <TR> <TD width="291px" height="47px"> <DIV class="">2022-05-31</DIV> <DIV class="">2022-05-31 10:18:14 HKT&nbsp; &nbsp;apac&nbsp;</DIV> </TD> </TR> <TR> <TD width="291px" height="47px"> <DIV class="">2022-05-31</DIV> <DIV class="">2022-05-31 10:18:20&nbsp; EDT&nbsp; &nbsp;us&nbsp;</DIV> </TD> </TR> </TBODY> </TABLE> <P>Please help me on this<BR />Thank you in Advance<BR />Veeru</P> Wed, 01 Jun 2022 15:19:41 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-add-the-time-zone-after-the-time-in-the-field/m-p/599838#M208789 Veeru 2022-06-01T15:19:41Z https://community.splunk.com/t5/Splunk-Search/How-do-I-add-the-time-zone-after-the-time-in-the-field/m-p/599904#M208821 <P>hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/241633">@Veeru</a>&nbsp;</P><P>you can try the below query&nbsp;</P><P>|makeresults |eval new = "2022-05-31 10:18:09 emea"<BR />|append [|makeresults |eval new= "2022-05-31 10:18:14 apac"]<BR />|append [|makeresults |eval new= "2022-05-31 10:18:20 us "]<BR />|eval new=replace(new,"emea", "CST emea")<BR />|eval new=replace(new,"apac", "HKT apac")<BR />|eval new=replace(new,"us", "EDT us")</P><P>&nbsp;</P><P><SPAN>If it helps karma is appreciated/if it resolves acceptance as solution is appreciated&nbsp;</SPAN></P> Tue, 31 May 2022 13:51:56 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-add-the-time-zone-after-the-time-in-the-field/m-p/599904#M208821 venky1544 2022-05-31T13:51:56Z https://community.splunk.com/t5/Splunk-Search/How-do-I-add-the-time-zone-after-the-time-in-the-field/m-p/600007#M208863 <P>Thanks for the help i got the results</P> Wed, 01 Jun 2022 06:14:53 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-add-the-time-zone-after-the-time-in-the-field/m-p/600007#M208863 Veeru 2022-06-01T06:14:53Z https://community.splunk.com/t5/Splunk-Search/How-do-I-add-the-time-zone-after-the-time-in-the-field/m-p/600026#M208869 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/241633">@Veeru</a>&nbsp;</P><P>if it resolved your issue can you please accept the solution it might help others in the group</P><P>&nbsp;</P><P>note:- <SPAN>If it helps karma is appreciated/if it resolves acceptance as solution is appreciated&nbsp;</SPAN></P> Wed, 01 Jun 2022 08:14:11 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-add-the-time-zone-after-the-time-in-the-field/m-p/600026#M208869 venky1544 2022-06-01T08:14:11Z