Splunk Search

Is it possible to change the date format when running search?

sbeamro
Explorer

Hi,
when I run any search the date format is MM/DD/YEAR.
how can I change the format to appear as DD/MM/YEAR ?

Tags (4)
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi sbeamro,

Either change the URI from en-US to en-GB or use the convert command to do this on selected fields http://docs.splunk.com/Documentation/Splunk/6.2.1/SearchReference/Convert

hope this helps ...

cheers, MuS

View solution in original post

MuS
SplunkTrust
SplunkTrust

Hi sbeamro,

Either change the URI from en-US to en-GB or use the convert command to do this on selected fields http://docs.splunk.com/Documentation/Splunk/6.2.1/SearchReference/Convert

hope this helps ...

cheers, MuS

sbeamro
Explorer

thanks for the information !
is it possible to change it on the server level ? or only per search ?

0 Karma

MuS
SplunkTrust
SplunkTrust

You can change this on server level take a look here http://answers.splunk.com/answers/177614/how-to-make-en-gb-default-in-url.html

0 Karma

sbeamro
Explorer

the only solution that works was to change in the address bar to be -
http://splunk:8000/en-GB/
non of the other answers make splunk to go by default to the en-GB format.

0 Karma

MuS
SplunkTrust
SplunkTrust
0 Karma

sbeamro
Explorer

nice !
should I mark this question as answered ?
it seems that there is no server's side solution for it.

0 Karma

MuS
SplunkTrust
SplunkTrust

If it answered your question, feel free to do so 😉

0 Karma
Get Updates on the Splunk Community!

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...