Getting Data In

Create Australian locale?

the_wolverine
Champion

We need to get Splunk to display date formats using the Australian format of dd/mm/yyyy rather than the US format which will confuse users.

I have my browser set to en_AU as it's default language but Splunk doesn't seem to be picking it up. I can get it to use en_GB since Great Britain has the same date format but we can't have all users change their browser language to en_GB just for Splunk.

1 Solution

the_wolverine
Champion

The Australian locale, en_AU, does not ship with Splunk but since its exactly the same as en_GB you can do the following:

- cd to $SPLUNK_HOME/lib/python2.6/site-packages/splunk/appserver/mrsparkle/locale/
- cp -R en_GB en_AU
- restart Splunk

Your users who have their browsers set to en_AU should now see the correct date format.

View solution in original post

jrodman
Splunk Employee
Splunk Employee

For history: we surveyed our users and they said it would be quite confusing to have the locale work for some (browser) strings, but not for our UI text. For this reason, we chose to simply restrict the UI to the implemented locales by default, but allow users to add their own locales.

The case where you continue to want to use the english text but use the european date format is sort of the flaw here. You don't have to have your users set en_GB to the default, you could have en_GB be secondary to en_AU, and we'll pick the 'most liked' locale that you have.

Of course, you can also just do as tina says and dupe the en_GB locale. A symlink might even work. Adding it as a default synonym to en_GB would probably be a good choice. I guess the other probable sale locations are: Ireland, New Zealand, and to a lesser extent the Philippines and India. Seems like a pretty good Requirement/Enhancement request to just work with the english locale in such places out of the box.

the_wolverine
Champion

The Australian locale, en_AU, does not ship with Splunk but since its exactly the same as en_GB you can do the following:

- cd to $SPLUNK_HOME/lib/python2.6/site-packages/splunk/appserver/mrsparkle/locale/
- cp -R en_GB en_AU
- restart Splunk

Your users who have their browsers set to en_AU should now see the correct date format.

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...