Getting Data In

Change multiple users timezone

oferprtz
Path Finder

Hi all,

How can we change the user timezone for all users under: Settings -> Access Controls -> Users?

thanks,
ofer.

Tags (3)
0 Karma
1 Solution

oferprtz
Path Finder

Found the answer!!
I've created command that add the time zone into all files of all users.
the con is the user directory must be exists (the user need to login at least once before you can apply this).
In each user directory you have the file "user-prefs.conf".
inside it it store all user configuration.
if you add at the end of the file the parameter: "tz = Asia/Jerusalem" for instance, the user will have set Jerusalem timezone.

to add timezone to all the users files use the below:
cd /opt/splunk/etc/users/ or where you have installed splunk.
find . -name "user-prefs.conf" -print | xargs sed -i '$a\tz = Asia/Jerusalem'
(or change the timezone to whatever you want).

enjoy!

View solution in original post

oferprtz
Path Finder

Found the answer!!
I've created command that add the time zone into all files of all users.
the con is the user directory must be exists (the user need to login at least once before you can apply this).
In each user directory you have the file "user-prefs.conf".
inside it it store all user configuration.
if you add at the end of the file the parameter: "tz = Asia/Jerusalem" for instance, the user will have set Jerusalem timezone.

to add timezone to all the users files use the below:
cd /opt/splunk/etc/users/ or where you have installed splunk.
find . -name "user-prefs.conf" -print | xargs sed -i '$a\tz = Asia/Jerusalem'
(or change the timezone to whatever you want).

enjoy!

MuS
SplunkTrust
SplunkTrust

Hi oferprtz,

this is not possible within the UI manager, but you can set user's default time zone in user-prefs.conf if you are using the Splunk internal user management.

hope this helps ...

cheers, MuS

oferprtz
Path Finder

thanks MuS, its exactly what ive found out + ive added command line that change all users.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...