Getting Data In

About daylight savings time

yutaka1005
Builder

I am thinking about building an environment in a country where daylight saving time exists, but as for the server, I am setting to change the summer time and winter time automatically,
Will it automatically change with respect to the time zone set for the user of splunk?

If it does not change automatically, what should be set?

0 Karma

inventsekar
Super Champion

https://answers.splunk.com/answers/241990/does-splunk-take-into-consideration-timezone-dayli.html

as answered by Woodcock, unless each event specifies TZ inside the event timestamp, you should always set TZ by host in props.conf like this:

# Tuscon
[host::My\.Host\.IP\.Here]
TZ = US/Mountain

Get Updates on the Splunk Community!

Enterprise Security Content Updates (ESCU) - New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 3 releases of new content via the Enterprise ...

Thought Leaders are Validating Your Hard Work and Training Rigor

As a Splunk enthusiast and member of the Splunk Community, you are one of thousands who recognize the value of ...

.conf23 Registration is Now Open!

Time to toss the .conf-etti 🎉 —  .conf23 registration is open!   Join us in Las Vegas July 17-20 for ...