Found the answer!!
I've created command that add the time zone into all files of all users.
the con is the user directory must be exists (the user need to login at least once before you can apply this).
In each user directory you have the file "user-prefs.conf".
inside it it store all user configuration.
if you add at the end of the file the parameter: "tz = Asia/Jerusalem" for instance, the user will have set Jerusalem timezone.
to add timezone to all the users files use the below:
cd /opt/splunk/etc/users/
or where you have installed splunk.
find . -name "user-prefs.conf" -print | xargs sed -i '$a\tz = Asia/Jerusalem'
(or change the timezone to whatever you want).
enjoy!
Found the answer!!
I've created command that add the time zone into all files of all users.
the con is the user directory must be exists (the user need to login at least once before you can apply this).
In each user directory you have the file "user-prefs.conf".
inside it it store all user configuration.
if you add at the end of the file the parameter: "tz = Asia/Jerusalem" for instance, the user will have set Jerusalem timezone.
to add timezone to all the users files use the below:
cd /opt/splunk/etc/users/
or where you have installed splunk.
find . -name "user-prefs.conf" -print | xargs sed -i '$a\tz = Asia/Jerusalem'
(or change the timezone to whatever you want).
enjoy!
Hi oferprtz,
this is not possible within the UI manager, but you can set user's default time zone in user-prefs.conf if you are using the Splunk internal user management.
hope this helps ...
cheers, MuS
thanks MuS, its exactly what ive found out + ive added command line that change all users.