All Apps and Add-ons

How do you set the License Usage App to use UTC time ?

Log_wrangler
Builder

Hi
I am having a lot of license overage issues so I decided to try the License Usage Dashboard APP
https://splunkbase.splunk.com/app/3178/
But the problem is that my license rolls at UTC which is currently 1900 pm CST (Central USA).
When I look at the app I don't see a way to change the time to UTC so my results are inaccurate as the next day occurs at 1900 on the current day.

Do I have to edit the queries in the dashboard panels 1x1?
If anyone has experience with this app, please advise.
Thank you.

0 Karma

Dennis
Loves-to-Learn

Hello Log_wranger,

Been a long time since you asked the question, but give this a try.

Add the following file within the app.  Go to $SPLUNK_HOME/etc/apps/licensequotausage/local, and create the new file props.conf.  Then the 1 line to enter related to your TZ setting would be:

TZ=UTC

Then restart Splunk.

0 Karma

Dennis
Loves-to-Learn

Hello Log_wranger,

Been a long time since you asked the question, but give this a try.

Add the following file within the app.  Go to $SPLUNK_HOME/etc/apps/licensequotausage/local, and create the new file props.conf.  Then the 1 line to enter related to your TZ setting would be:

TZ=UTC

Then restart Splunk.

 

 

0 Karma

codebuilder
SplunkTrust
SplunkTrust

You'll need to set UTC at the user level. Splunk displays results to the user based on the TZ set in their user profile.

Set the time zone for a user's search results

When you add or edit users using Splunk authentication, you can set a user time zone. Search results for that user will appear in the specified time zone. This setting, however, does not change the actual event data, whose time zone is determined at index time. For information on setting this value, see Configure users with Splunk Web in the Securing Splunk manual. 

See https://docs.splunk.com/Documentation/Splunk/7.2.6/Data/Applytimezoneoffsetstotimestamps for more details.

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma

Log_wrangler
Builder

Thank you for your reply.

If I change my preferences to GMT the app works fine, but then I have to switch back for the search app.

I was looking for a way to set the "app" TZ=UTC...

but I don't know how to set that up...

0 Karma
Get Updates on the Splunk Community!

How I Instrumented a Rust Application Without Knowing Rust

As a technical writer, I often have to edit or create code snippets for Splunk's distributions of ...

Splunk Community Platform Survey

Hey Splunk Community, Starting today, the community platform may prompt you to participate in a survey. The ...

Observability Highlights | November 2022 Newsletter

 November 2022Observability CloudEnd Of Support Extension for SignalFx Smart AgentSplunk is extending the End ...