<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to fix timechart issue with dates involved in between a daylight savings time change? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-fix-timechart-issue-with-dates-involved-in-between-a/m-p/126892#M34379</link>
    <description>&lt;P&gt;Hi guys, we have a problem when we try to use timecharts that involve dates having in between a daylight saving time change.&lt;/P&gt;

&lt;P&gt;If I change my timezone to GMT in account preferences, the timecharts query works fine, but if I do a span=1d it shows September 6 twice and doesn't show September 7.&lt;/P&gt;

&lt;P&gt;If i change my timezone to GMT-4 Santiago, the query fails showing NaN numbers.&lt;/P&gt;

&lt;P&gt;The query is&lt;/P&gt;

&lt;BLOCKQUOTE&gt;
&lt;P&gt;: sourcetype=varnish&lt;BR /&gt;
account_id="50aa2711a6884125020019f1"&lt;BR /&gt;
| timechart span=1d&lt;BR /&gt;
distinct_count(customer_id)&lt;/P&gt;
&lt;/BLOCKQUOTE&gt;

&lt;P&gt;All our logs has time fields on UTC.&lt;/P&gt;

&lt;P&gt;any ideas?&lt;/P&gt;

&lt;P&gt;Thanks!.&lt;/P&gt;</description>
    <pubDate>Mon, 28 Sep 2020 17:35:51 GMT</pubDate>
    <dc:creator>csepulveda</dc:creator>
    <dc:date>2020-09-28T17:35:51Z</dc:date>
    <item>
      <title>How to fix timechart issue with dates involved in between a daylight savings time change?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-fix-timechart-issue-with-dates-involved-in-between-a/m-p/126892#M34379</link>
      <description>&lt;P&gt;Hi guys, we have a problem when we try to use timecharts that involve dates having in between a daylight saving time change.&lt;/P&gt;

&lt;P&gt;If I change my timezone to GMT in account preferences, the timecharts query works fine, but if I do a span=1d it shows September 6 twice and doesn't show September 7.&lt;/P&gt;

&lt;P&gt;If i change my timezone to GMT-4 Santiago, the query fails showing NaN numbers.&lt;/P&gt;

&lt;P&gt;The query is&lt;/P&gt;

&lt;BLOCKQUOTE&gt;
&lt;P&gt;: sourcetype=varnish&lt;BR /&gt;
account_id="50aa2711a6884125020019f1"&lt;BR /&gt;
| timechart span=1d&lt;BR /&gt;
distinct_count(customer_id)&lt;/P&gt;
&lt;/BLOCKQUOTE&gt;

&lt;P&gt;All our logs has time fields on UTC.&lt;/P&gt;

&lt;P&gt;any ideas?&lt;/P&gt;

&lt;P&gt;Thanks!.&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 17:35:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-fix-timechart-issue-with-dates-involved-in-between-a/m-p/126892#M34379</guid>
      <dc:creator>csepulveda</dc:creator>
      <dc:date>2020-09-28T17:35:51Z</dc:date>
    </item>
    <item>
      <title>Re: How to fix timechart issue with dates involved in between a daylight savings time change?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-fix-timechart-issue-with-dates-involved-in-between-a/m-p/126893#M34380</link>
      <description>&lt;P&gt;You might be running into this problem:&lt;/P&gt;

&lt;P&gt;&lt;A href="http://answers.splunk.com/answers/155320/why-is-the-search-app-time-range-picker-defaulting-to-2001-even-if-i-specify-another-date-and-time.html"&gt;http://answers.splunk.com/answers/155320/why-is-the-search-app-time-range-picker-defaulting-to-2001-even-if-i-specify-another-date-and-time.html&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;There's something magic about September 6, based on the comments in that thread.&lt;/P&gt;</description>
      <pubDate>Tue, 16 Sep 2014 16:54:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-fix-timechart-issue-with-dates-involved-in-between-a/m-p/126893#M34380</guid>
      <dc:creator>aweitzman</dc:creator>
      <dc:date>2014-09-16T16:54:36Z</dc:date>
    </item>
  </channel>
</rss>

