Getting Data In

WebLogic add-on is not parsing UTC time zone correctly but does correct with GMT

seva98
Path Finder

I've discovered issue with WebLogic add-on (1.0.0) for Splunk and I am having hard time figuring out how to fix props.conf to parse timestamp correctly.

My Splunk instance is in CEST. There is string with timezone after timestamp and CEST/GMT are parsed correctly but UTC is not.

Server #1 - Correct

 

 

####<Oct 5, 2022 5:00:21 PM CEST> <Info> ...

Parsed timestamp: 10/5/22 5:00:21.000 PM

 

 

 

Server #2 - correct

 

 

####<Oct 5, 2022 3:24:11 PM GMT> <Info> ...

Parsed timestamp: 10/5/22 5:24:11.000 PM

 

 

 

Server #3 - incorrect

 

 

####<Oct 5, 2022 4:30:23 PM UTC> <Info>

Parsed timestamp: 10/5/22 4:30:23.000 PM
Should be: 10/5/22 6:30:23.000 PM

 

 

 

  

Labels (3)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...