Re: Splunk Forwarder v6 - verify timezone - Splunk Community

Getting Data In

How can I see what timezone the forwarder is using in my v6 to v6 splunk setup?

I'm just curious to verify it's set properly, that's all. Seeing the timezone might help me find a machine with an incorrect timezone too.

Thanks,
Brian

http://docs.splunk.com/Documentation/Splunk/6.0.1/data/Applytimezoneoffsetstotimestamps

Hi BP9906,

you could use the date_zone field which contains the time zone offset from GMT in minutes and do some reporting on it ... like

 your search to get all universal forwarders | stats count by date_zone, host

hope this helps ...

cheers, MuS

Get Updates on the Splunk Community!

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...