#Random
This is a place to discuss all things outside of Splunk, its products, and its use cases.

Feature Request: Docker TimeZone

bstreber
Path Finder

Currently Splunk's Docker container does not support TZ or TIMEZONE options. I am able to change the TZ for a individual user but this still causes discrepancies in some log files and times. Additionally for free users who are unable to set a TZ for users this means they are stuck on UTC.

codebuilder
Influencer

You'll have to rebuild the Docker image using updated TZ in the Docker Makefile.

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma

cloutid
New Member

Hi, have you tried modifying the Dockerfile and set the timezone there?

0 Karma

bstreber
Path Finder

Yeah I attempted TIMEZONE = America/Vancouver and when I enter "date" in the console it would respond with the UTC time but specify the timezone I selected.

0 Karma

cloutid
New Member

Here's how i did it in my dockerfile and it seems to be working:

ARG SPLUNK_VERSION

FROM splunk/splunk:${SPLUNK_VERSION}

ENV TZ=America/Toronto

USER root

RUN set -eux chown -R splunk:splunk /opt/splunk/etc/; \
chmod -R 755 /opt/splunk/etc/; \
ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone;

USER ansible

0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...