Do I need to restart Splunk after a daylight savings change?

[Jason]

I'm looking at a client system right now that has the following:

• the event has a timestamp of 18:00:00
• the Splunk extrapolated time (in gray next to it on flashtimeline) of 18:00:00
• the flash histogram above it (zoomed into a one-minute time interval) says 19:00:00

Does this just mean that daylight savings time has occurred and the splunkd hasn't yet been restarted?

[russellliss]

I found that changing your timezone, and researching updates the extrapolated time, but I needed to logoff to have the histogram update to the correct time.