Getting Data In

Feature of Splunk: Auto detect user client (PC/Notebook) time zone?

henrysoon80
New Member

Hi all,

Any Splunk features able auto detect current login user client time zone, maybe detect on operating system level.

This is because in worldwide users some country practice daylight saving time (DST). Example: Beginning summer season in March, and some local time zone adjusts clocks forward one hour.

However, our normal user on DST location still refers on Splunk pertained time zone and report still automatically convert times into the time zone whereby selected in user Splunk profile, which is caused incorrect analysis of the data further by decision making.

Thanks

0 Karma

henrysoon80
New Member

Hi FrankVI,

Example my Euro user, by right their timezone before DST is +1 GMT which is follow splunk pertained timezone.
Currently, Euro countries in the summer season so locally they practice DST mean +2 GMT timezone

So which mean in splunk no has a feature to detect CET timezone, to allow auto detect and adjust the time diff during summer season.

0 Karma

FrankVl
Ultra Champion

Just have those users set their timezone to (GMT+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna and it will adjust for DST just fine.

0 Karma

skalliger
Motivator

If you're using roles that belong to specific regions, you can define the timezone (tz) in user-prefs.conf. Just take a look into it.

Skalli

0 Karma

FrankVl
Ultra Champion

How would that give different results from users setting their local timezone individually? Unless the issue is with users selecting the wrong timezone. Then this solution could help forcing their correct regional timezone on them.

Still wondering what the real issue is that @henrysoon80 is facing.

0 Karma

skalliger
Motivator

I personally hate setting my timezone, so I use a default value. This way, users do not have to set it themselves.

0 Karma

FrankVl
Ultra Champion

I find it really difficult to follow your question and understand your actual problem.

Can you perhaps give a concrete example, rather than using vague terms like "worldwide users" and "normal user" and "Splunk pertained time zone"?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

How to find the worst searches in your Splunk environment and how to fix them

Everyone knows Splunk is a powerful platform for running searches and doing data analytics. Your ...

Share Your Feedback: On Admin Config Service (ACS)!

Help Us Build a Better Admin Config Service Experience (ACS)   We Want Your Feedback on Admin Config Service ...

Build the Future of Agentic AI: Join the Splunk Agentic Ops Hackathon

AI is changing how teams investigate incidents, detect threats, automate workflows, and build intelligent ...