Are queries that go to two index servers in different time zones handled correctly? I'm assuming it does, but want to be sure. Specifically, do queries get adjusted for the time zone they originate in and pull the right data according to the time zone the index servers are in? Also, does the gui adjust and handle the results appropriately coming back?
Timestamps are converted to UTC at index time. The events coming across distributed should be ordered correctly.
Timestamps are converted to UTC at index time. The events coming across distributed should be ordered correctly.