Splunk Search

How to change timezone from CST to EST during search time?

splunker9999
Path Finder

Hi,

Can you please help us in changing time from central to EST during search time? We have our server in central zone and hence we are seeing time as CST.

index=sa host=central.1 sourcetype=tidal_log "external" NOT "exec" NOT "*Process ID"  | table _time,jcode, jname, jstatus | sort -_time, jstatus
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

The time you see is controlled by your user's settings, change that by clicking your name in the top centre.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

I've set my time zone to Eastern, note how it translates 11pm CET / UTC+1 into 6pm EDT / UTC-4 in the time column next to the raw data.

alt text

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

When you search for index=sa host=central.1 sourcetype=tidal_log | head 10 you should see the raw data, and to the left of the raw data there should be a time column. That time column should be displayed in your user's time zone, ie EDT. The raw data could be in any time zone.

0 Karma

splunker9999
Path Finder

Hi, I dont see any time column.

Could notice below fields available , but I dont believe these are useful to list time in EST
date_hour
date_sec...

date_zone
tiemendpos
timestartpos

0 Karma

splunker9999
Path Finder

I have that one as US/Eastern only, but since our data center is their in CST and I am just assuming it may be reason?

Can there be any possibility to format time during search time using eval time?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...