Is it possible to set Splunk's timezone for each user based on their metadata in their SSO profile they use to log into Splunk?
I'm pretty sure I can automate this information on the SSO side in a way that I can't using role-based configurations in Splunk (why can't roles have default timezones???), the only issue is getting Splunk to accept the timezone value.
Using Splunk Cloud, currently on 8.2.something
Thanks!
Splunk only collects group membership information from SSO providers. You may be able to script something using the REST API, however. See https://docs.splunk.com/Documentation/SplunkCloud/latest/RESTREF/RESTaccess#authentication.2Fusers.2...
Roles don't have default timezones because users in the same role are not necessarily in the same area.
Splunk only collects group membership information from SSO providers. You may be able to script something using the REST API, however. See https://docs.splunk.com/Documentation/SplunkCloud/latest/RESTREF/RESTaccess#authentication.2Fusers.2...
Roles don't have default timezones because users in the same role are not necessarily in the same area.