What should be the TZ for eastern time events?

[danielbb]

We are a bit confused. Should be specify TZ = EDT or something else for eastern time?

[gcusello · Accepted solution]

Hi danielbb,
I'm also a little bit confused, what's your question?
In internet you can find many sites with the timezones as wikipedia or worldclock or timeanddate.

On Splunk documentation, you can find some useful docs:

• https://docs.splunk.com/Documentation/Splunk/7.3.1/Data/Applytimezoneoffsetstotimestamps
• https://docs.splunk.com/Documentation/Splunk/7.3.1/Search/Abouttimezones

Anyway, as you can see in the above documentation, you can use:

TZ = US/Eastern

Bye.
Giuseppe

[danielbb]

I agree @gcusello, but according to List of tz database time zones

TZ = US/Eastern got deprecated.