#Random
This is a place to discuss all things outside of Splunk, its products, and its use cases.

Feature Request: Docker TimeZone

bstreber
Path Finder

Currently Splunk's Docker container does not support TZ or TIMEZONE options. I am able to change the TZ for a individual user but this still causes discrepancies in some log files and times. Additionally for free users who are unable to set a TZ for users this means they are stuck on UTC.

codebuilder
Influencer

You'll have to rebuild the Docker image using updated TZ in the Docker Makefile.

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma

cloutid
New Member

Hi, have you tried modifying the Dockerfile and set the timezone there?

0 Karma

bstreber
Path Finder

Yeah I attempted TIMEZONE = America/Vancouver and when I enter "date" in the console it would respond with the UTC time but specify the timezone I selected.

0 Karma

cloutid
New Member

Here's how i did it in my dockerfile and it seems to be working:

ARG SPLUNK_VERSION

FROM splunk/splunk:${SPLUNK_VERSION}

ENV TZ=America/Toronto

USER root

RUN set -eux chown -R splunk:splunk /opt/splunk/etc/; \
chmod -R 755 /opt/splunk/etc/; \
ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone;

USER ansible

0 Karma
Get Updates on the Splunk Community!

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...