Getting Data In

Does Splunk has a feature to auto detect the timezone of the viewer?

Cbr1sg
Path Finder

Hello all,
I have an use case in Splunk to display the data in the viewer's timezone automatically.

For example: when an user in Singapore sees the data, the time of the event will be calculated according to +8 timezone, while it will be +5:30 timezone when an user in India view the exact same data.

Does Splunk have a feature to auto-detect the timezone of the viewer (maybe from Operating System time)? If no, do you have an alternative solution for this use case?

Thanks

Tags (2)
0 Karma

renjith_nair
Legend

@Cbr1sg ,
Users can select the preferred timezone in the browser by selecting your Username ->Account Settings and select the required timezone from the available timezone drop-down. Events timestamp will be shown based on that timezone. If you are an admin, you could set this for individual users - http://docs.splunk.com/Documentation/Splunk/7.1.2/Security/ConfigureuserswithSplunkWeb

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma

Cbr1sg
Path Finder

I'm aware of this, but I dont want to do this way since we have more than 100K of viewers (include VIP) and we can't probably ask every single user to do it. Would be much better if Splunk can detect the timezone automatically from viewer's computer time

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Splunk automatically converts times into the timezone selected by the viewer in his Splunk profile.

---
If this reply helps you, Karma would be appreciated.
0 Karma

Cbr1sg
Path Finder

same comment as above, I'm aware of this, but I dont want to do this way since we have more than 100K of viewers (include VIP) and we can't probably ask every single user to do it. Would be much better if Splunk can detect the timezone automatically from viewer's computer time

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Splunk does not detect the user's timezone automatically so the manual option is all there is. Feel free to submit an RFE.

IMO, it's perfectly reasonable to expect users to specify the time zone in which they want to see times displayed. It only has to be done once and only by those who don't want the default setting.

---
If this reply helps you, Karma would be appreciated.

Cbr1sg
Path Finder

Yes I totally agree with you in someway it's very reasonable to expect users to specify the timezone themselves once. However there are multiple types of user and some of them just doesn't want to do extra little steps.
IMO, the feature to detect the system time from user's computer is not something new, seen it in many websites nowsaday, should be something that Splunk can implement easily. I will submit RFE then, thanks for your suggestion.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform

 Are you ready to revolutionize your IT operations? As digital transformation accelerates, the demand for ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...