I am having trouble with my checkpoint log.
Or indefinite is late hour.
Actual time of the event: 12:15.
Time that is indexed on spunk: 11:15: AM
Time at checkpoint is correct. Splunk time is ticking. Already added in props.conf the checkpoing or sourcetype [opsec] and put the parameter
TZ = America / Sao_Paulo, but I have the wrong indexing
The past weekend was daylight savings changeover. Are you certain all your timezones are set properly? Is the clock on the indexer(s) accurate?