#Random
This is a place to discuss all things outside of Splunk, its products, and its use cases.

Feature Request: Docker TimeZone

bstreber
Path Finder

Currently Splunk's Docker container does not support TZ or TIMEZONE options. I am able to change the TZ for a individual user but this still causes discrepancies in some log files and times. Additionally for free users who are unable to set a TZ for users this means they are stuck on UTC.

codebuilder
Influencer

You'll have to rebuild the Docker image using updated TZ in the Docker Makefile.

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma

cloutid
New Member

Hi, have you tried modifying the Dockerfile and set the timezone there?

0 Karma

bstreber
Path Finder

Yeah I attempted TIMEZONE = America/Vancouver and when I enter "date" in the console it would respond with the UTC time but specify the timezone I selected.

0 Karma

cloutid
New Member

Here's how i did it in my dockerfile and it seems to be working:

ARG SPLUNK_VERSION

FROM splunk/splunk:${SPLUNK_VERSION}

ENV TZ=America/Toronto

USER root

RUN set -eux chown -R splunk:splunk /opt/splunk/etc/; \
chmod -R 755 /opt/splunk/etc/; \
ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone;

USER ansible

0 Karma
Get Updates on the Splunk Community!

Fall Into Learning with New Splunk Education Courses

Every month, Splunk Education releases new courses to help you branch out, strengthen your data science roots, ...

Super Optimize your Splunk Stats Searches: Unlocking the Power of tstats, TERM, and ...

By Martin Hettervik, Senior Consultant and Team Leader at Accelerate at Iver, Splunk MVPThe stats command is ...

How Splunk Observability Cloud Prevented a Major Payment Crisis in Minutes

Your bank's payment processing system is humming along during a busy afternoon, handling millions in hourly ...