How to change timezone from CST to EST during search time?

[splunker9999]

Hi,

Can you please help us in changing time from central to EST during search time? We have our server in central zone and hence we are seeing time as CST.

index=sa host=central.1 sourcetype=tidal_log "external" NOT "exec" NOT "*Process ID"  | table _time,jcode, jname, jstatus | sort -_time, jstatus

[martin_mueller]

The time you see is controlled by your user's settings, change that by clicking your name in the top centre.

[martin_mueller]

I've set my time zone to Eastern, note how it translates 11pm CET / UTC+1 into 6pm EDT / UTC-4 in the time column next to the raw data.

[martin_mueller]

When you search for index=sa host=central.1 sourcetype=tidal_log | head 10 you should see the raw data, and to the left of the raw data there should be a time column. That time column should be displayed in your user's time zone, ie EDT. The raw data could be in any time zone.

[splunker9999]

Hi, I dont see any time column.

Could notice below fields available , but I dont believe these are useful to list time in EST
date_hour
date_sec...

date_zone
tiemendpos
timestartpos

[splunker9999]

I have that one as US/Eastern only, but since our data center is their in CST and I am just assuming it may be reason?

Can there be any possibility to format time during search time using eval time?