- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Using SPLUNK 6.2.1 - How do I display all my date/times using the 24-hour clock? I want to keep the US Local for the date, but have the time show as 17:33;33 instead of 5:33:33.
I have seen some posts for version 4.1.1, but have not seen answers for the more recent versions.
Thanks
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

You can still use a different locale in your browser; that will work. Use en-GB instead of en-US
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

You can still use a different locale in your browser; that will work. Use en-GB instead of en-US
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes, I did do that and it works. Wasn't sure what side-effects that might have (if any)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

No side-effects! In the actual indexes, Splunk stores all timestamps in Linux epoch time, with a timezone of UTC.
When Splunk displays times, it takes into account the user's timezone setting and the browser setting.
