Getting Data In

WebLogic add-on is not parsing UTC time zone correctly but does correct with GMT

seva98
Path Finder

I've discovered issue with WebLogic add-on (1.0.0) for Splunk and I am having hard time figuring out how to fix props.conf to parse timestamp correctly.

My Splunk instance is in CEST. There is string with timezone after timestamp and CEST/GMT are parsed correctly but UTC is not.

Server #1 - Correct

 

 

####<Oct 5, 2022 5:00:21 PM CEST> <Info> ...

Parsed timestamp: 10/5/22 5:00:21.000 PM

 

 

 

Server #2 - correct

 

 

####<Oct 5, 2022 3:24:11 PM GMT> <Info> ...

Parsed timestamp: 10/5/22 5:24:11.000 PM

 

 

 

Server #3 - incorrect

 

 

####<Oct 5, 2022 4:30:23 PM UTC> <Info>

Parsed timestamp: 10/5/22 4:30:23.000 PM
Should be: 10/5/22 6:30:23.000 PM

 

 

 

  

Labels (3)
0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...