Re: Splunk dbConnect inputs

chaitali_1994 · ‎08-07-2020

I am using Splunk dbConnect to collect data from database. While configuring the connection, set the timezone as Etc/GMT+1 : -01:00 as the logs generation time in database is GMT+1

When I was searching the data and searched for time difference, got time difference of 1 hour, _time is 1 hr ahead of indextime.

FYI: The database is in GMT+1

What is the difference between Etc/GMT+1 : -01:00 and Etc/GMT-1 : +01:00 ?

Thank you for any help!

thambisetty · ‎08-07-2020

Try choosing TZ GMT+1 not etc/gmt+1 in database connections.

————————————
If this helps, give a like below.

chaitali_1994 · ‎08-07-2020

I do not see any TZ like GMT+1, its Etc/GMT+1: -01:00 and Etc/GMT-1:+01:00

thambisetty · ‎08-07-2020

choose based on your area. there are so many for +1, but don't choose the one with etc.

————————————
If this helps, give a like below.

Splunk dbConnect inputs

time

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

How to Monitor AI Agents with Splunk Agent Observability

Deep Dive: The Agentic SOC in Action with Enterprise Security Agents

[Puzzles] Solve, Learn, Reuse: Word-play

Join the Conversation