Splunk Enterprise

Search results always appear with american style dates

gavinsopra
Engager

I am running Splunk Enterprise 8.0.2 on my Windows 10 PC (at home obviously [COVID-19 etc]) and using Chrome 81. I am UK based and everything is configure for the UK.
I am pulling in log files in which each line starts with date and time in UK format, e.g.

2020-03-27 00:04:18 Syncapp 01234 info [varying rubbish] : Started sync 'SyncGroup01::SyncJob11'

Whenever I search for these events the 'Time' field always gives the date in US style, as seen below.

alt text

Changing the "Preferences->Timezone" setting doesn't seem to have any impact. Is there a way to make Splunk understand that I am in the UK and display UK style dates by default?

Labels (1)
Tags (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Maybe I need new glasses, but I'm seeing 31/03/2020 in the Time column. Since there are not 31 months in a year, it must be dd/mm/yyyy (UK) format.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Maybe I need new glasses, but I'm seeing 31/03/2020 in the Time column. Since there are not 31 months in a year, it must be dd/mm/yyyy (UK) format.

---
If this reply helps you, Karma would be appreciated.
0 Karma

gavinsopra
Engager

Apologies, you are right. I've spent too much time working on applications where dates are always YYYY-MM-DD and got myself confused.
I'll try and ask more intelligent questions in the future.

I don't appear to be able to 'Accept' your comment as the answer so i'm not sure how to close this thread.

0 Karma

gavinsopra
Engager

Sorry, I should have said...
I read this answer link text

and tried all the things suggested.
My URL does start 'http://localhost:8000/en-GB/app/search/...' and Chrome is configured for "English (United Kingdom)".

0 Karma

PavelP
Motivator

Hello @gavinsopra,
please check the splunk URL contains http://splunk:8000/en-US or en-UK. The settings can be configured in chrome > settings > languages - move english (united kingdom) to the top of the language list.

let me know if it worked

0 Karma
Get Updates on the Splunk Community!

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...