Knowledge Management

UTC Time Picker - working with UTC input time

gavalle
New Member

Good morning
I am trying to design a dashboard always able to display data according to UTC time. So, among the other features, I would like to allow users to perform events retrieval according to UTC input time ranges.
In fact, we are monitoring log events (in UTC time) and we need to have a shared dashboard with consistent contents all over the world. But I cannot force users to set their timezone as UTC, there exist other dashboards for which it is useful for them to keep their local settings.

So, the problem to face is that the standard time picker works using the user timezone declared in his/her local settings.
I am able to correct most of the introduced delta times (between UTC and user's timezone) in tokens, making the time picker work "as if" it was an UTC time picker, but I still have issues (like the datetime previews you have when you insert timestamps or you select relative time intervals, like "earliest 5 hours") that I am not able to solve.

My question is: is it possible to set, a priori, the timezone to be used as the official one in a dashboard (replacing the user settings)?
Or, as an alternative, is it possible to define a new time picker form input and use it inside the dashboard, instead of the standard one?

0 Karma

splunk_user_us
New Member

Did you ever come to a solution for this? I am having the exact same problem. Regardless of the user's timezone, I want the users providing timepicker entries in Central time.

All my results in the dashboard are output in Central time and that is working fine. However, when interacting with users across timezones, they get confused when they say "search from 9:00:00 to 10:00:00" and are in Eastern and are getting 8:00:00 to 9:00:00 output.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...