Getting Data In

Does TZ setting account for daylight savings time changes?

ddrillic
Ultra Champion

Does anyone know if the TZ setting "US/Central" accounts for daylight savings time changes (e.g. TZ=US/Central)?

Tags (2)
0 Karma
1 Solution

ddrillic
Ultra Champion

Our Sales Engineer said -

-- You’re right, documentation is lacking here. But I’d argue that’s because it’s not something our users can change or need to.

In fact, we use the standard libraries for various programming languages to fetch TZ info (including DST info) from the system time database. We then make the (very useful) transformation of data in our program’s memory to UTC time, which of course helps us stay consistent despite TZ & DST changes.

As long as the OS has a correct time set and has up to date info for the timezone database, Splunk will remain in sync as well. Pretty standard software feature, honestly a lot harder to get wrong than to get right.

0 Karma

ddrillic
Ultra Champion
0 Karma

ragedsparrow
Contributor
0 Karma

ddrillic
Ultra Champion

Perfect @ragedsparrow

0 Karma
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...