Dashboards & Visualizations

How to covert GMT time in to UTC time(0-12:00) for all the weekdays (Mon-Fri )?

rajhemant26
New Member

Hello everyone.

Want to display the output only for the time which crosses 18 months (earliest time)

Tags (1)
0 Karma

nickhills
Ultra Champion

Splunk will always use UTC (GMT) to index events - internally it uses Unix Time or epoch which is always UTC.

To have Splunk search in a timezone other than UTC the simplest way is to ensure your Locale is set to the timezone you want to use as your reference time. (From the menu, click your username and select preferences)

If you have already set your locale to a UTC adjusted timezone and it still shows incorrectly, you have a problem with your timestamp extraction.

If my comment helps, please give it a thumbs up!
0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...