is Splunk convert the time from UTC to GMT?

[abdullahalhabba]

Hi Splunker;

I have kaspersky logs this logs send logs to splunk by use CEF format, when changed format to syslog format was there issue.

this issue is: We are receiving now syslog from Kaspersky in real-time, but the timestamp is in UTC Time Zone (GMT 00:00) – the timestamp highlighted with red is our Time Zone (GMT+03:00) while the Kaspersky syslog is UTC Time Zone (See the timestamp highlighted with blue). There are three hours difference from our time, you can see the screenshot from syslog server.

Is there way from splunk for does to convert (GMT 00:00) time to (GMT+03:00)

Thank you

[vishaltaneja070]

@abdullahalhabbash

Please use the below link which can help you better:
https://docs.splunk.com/Documentation/Splunk/7.2.3/Data/Applytimezoneoffsetstotimestamps