Splunk Enterprise

Splunk DB Connect Scheduling: conflict between time zone of scheduled time and actual run time

mlevsh
Builder

We are using Splunk DB Connect version 3.4.0 and schedule Jobs to run on cron.
We are in Easter time zone. 
When the Job is scheduled to run at certain time, it runs an hour later , than expected.

For example: 
At 12:39pm EST the following Job "S_dbconect_test_job"  is scheduled to be run at 12:41pm EST,
but internal log shows that the scheduling is logged at 11:39pm , not at 12:39pm, as result the jobs runs at 1:39pm EST. Here is the entry from internal log:

6/24/21 12:39:50.487 PM
2021-06-24 11:39:50.487 -0500 [dw-679 - PUT /api/inputs/S_dbconect_test_job] INFO org.easybatch.extensions.quartz.JobScheduler - Scheduling job org.easybatch.core.job.BatchJob@1956b4b7 with cron expression 0 41 12 ? * *
host = host03 source = /opt/splunk/var/log/splunk/splunk_app_db_connect_server.log sourcetype = dbx_server


Time zone of connection , used for the Job, is set to  US/Eastern: -04:00
Where does this one hour difference might come from?
Appreciated any advises 


 

Labels (1)
0 Karma
1 Solution

mlevsh
Builder

@phemme 

What  os system are you using and which TZ zone are you in?

We are in EST/EDT zone and we are running DB Connect on Linux.
First we have added the following environmental variable TZ  to splunk user  "/home/<splunk_user>/.bash_profile":
                  TZ = America/New_York
                  export TZ

where TZ value is from here: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones
We just implemented that solution yesterday and still testing. But the initial testing was good. The 1 hr difference was gone. 

Update:
The solution worked until server got rebooted. 

So the second try on solution was to add TZ = America/New_York to 
/opt/splunk/etc/splunk-launch.conf and that worked after Splunk restart and Splunk reboot as well.

View solution in original post

Tags (1)

phemme
Engager

We have exactly the same issue.. Any ideas?

mlevsh
Builder

@phemme 

What  os system are you using and which TZ zone are you in?

We are in EST/EDT zone and we are running DB Connect on Linux.
First we have added the following environmental variable TZ  to splunk user  "/home/<splunk_user>/.bash_profile":
                  TZ = America/New_York
                  export TZ

where TZ value is from here: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones
We just implemented that solution yesterday and still testing. But the initial testing was good. The 1 hr difference was gone. 

Update:
The solution worked until server got rebooted. 

So the second try on solution was to add TZ = America/New_York to 
/opt/splunk/etc/splunk-launch.conf and that worked after Splunk restart and Splunk reboot as well.

Tags (1)
Get Updates on the Splunk Community!

Exporting Splunk Apps

Join us on Monday, October 21 at 11 am PT | 2 pm ET!With the app export functionality, app developers and ...

Cisco Use Cases, ITSI Best Practices, and More New Articles from Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...