Time difference in splunk_python sourcetype for only one user

[abilashselvan]

We could see an hour difference in splunk_python sourcetype for only one user.
could anyone please check?

Thanks,
Abilash S

[richgalloway]

The only ones who can check are you and your Splunk admins.
Has the user in question checked the time zone setting on his Splunk account?

[abilashselvan]

@richgalloway ,

Thanks for your response!!

Actually , we are facing the issue not only for one alert , there are few more alerts where we could see an hour difference only for splunk_python sourcetype.

Thank you

[richgalloway]

@abilashselvan You didn't answer my question. Has the user in question checked the time zone setting on his Splunk account?
What are the props.conf settings for that sourcetype?
Is it possible the data source changed to Daylight Saving Time and the Splunk server has not?