Why time zone in Splunk 5.0.2 for Moscow (Russia) is +3? Must be +4!
I have already asked this question long ago, but still no correction from Splunk team.
See some workarounds on this: http://splunk-base.splunk.com/answers/40985/time-zone-recognition-still-doesnt-work-after-editing-pr...