Getting Data In

How to use 24-hour clock in the US Local?

lyndac
Contributor

Using SPLUNK 6.2.1 - How do I display all my date/times using the 24-hour clock? I want to keep the US Local for the date, but have the time show as 17:33;33 instead of 5:33:33.

I have seen some posts for version 4.1.1, but have not seen answers for the more recent versions.

Thanks

Tags (2)
0 Karma
1 Solution

lguinn2
Legend

You can still use a different locale in your browser; that will work. Use en-GB instead of en-US

View solution in original post

lguinn2
Legend

You can still use a different locale in your browser; that will work. Use en-GB instead of en-US

lyndac
Contributor

Yes, I did do that and it works. Wasn't sure what side-effects that might have (if any)

0 Karma

lguinn2
Legend

No side-effects! In the actual indexes, Splunk stores all timestamps in Linux epoch time, with a timezone of UTC.

When Splunk displays times, it takes into account the user's timezone setting and the browser setting.

Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...