How do you update the time in phantom for daylight savings time? We are using NTP on the server and the server time is fine, and the user and system time are set properly, but the time is still an hour behind. We also restarted phantom since the time change.
Multiple people have reported this in the Phantom community slack. If you haven't already, definitely submit a support ticket and add an entry at ideas.splunk.com with your support ticket number attached.