Getting Data In

couldn't recognize IDT time zone in timestamp extraction

barakharyati1
New Member

Hi

i am trying to extract time stamp from a log file
the time stamp in the file is

Mar 25, 2017 10:00:01 PM IDT
and i am using that Timestamp format %b %d, %Y %H:%M:%S %p %Z

but Splunk couldn't recognize IDT (Israel Daylight Time) as legal TimeZone
https://www.timeanddate.com/time/zones/idt

please advise

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Consider adding TZ_ALIAS = IST=GMT+02:00, IDT=GMT+03:00 to your props.conf file.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Cloud Platform & Enterprise: Classic Dashboard Export Feature Deprecation

As of Splunk Cloud Platform 9.3.2408 and Splunk Enterprise 9.4, classic dashboard export features are now ...

Explore the Latest Educational Offerings from Splunk (November Releases)

At Splunk Education, we are committed to providing a robust learning experience for all users, regardless of ...

New This Month in Splunk Observability Cloud - Metrics Usage Analytics, Enhanced K8s ...

The latest enhancements across the Splunk Observability portfolio deliver greater flexibility, better data and ...