Getting Data In

Hunk UTC timezone

burwell
SplunkTrust
SplunkTrust

We use UTC as our timezone for Hunk + HIve. So we use this in our indexes.conf

vix.input.1.et.timezone = UTC

I have read http://docs.oracle.com/javase/7/docs/api/java/util/TimeZone.html but am not clear if "UTC" is legitimate.
If not, what should I use?

Tags (2)
0 Karma

jkat54
SplunkTrust
SplunkTrust

UTC = GMT

0 Karma

burwell
SplunkTrust
SplunkTrust

So I should be putting GMT not UTC?

0 Karma

jkat54
SplunkTrust
SplunkTrust

It's Java util simple time zone...

I googled Java time zone IDs and found that GMT should be fine but if that doesn't work try GMT + 0:00

0 Karma

jkat54
SplunkTrust
SplunkTrust

If that doesn't work try "universal" instead as UTC and universal are supposed to work just as well

0 Karma

ddrillic
Ultra Champion

Not much help at Set up virtual indexes

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...