Splunk Search

Is it possible to change the date format when running search?

sbeamro
Explorer

Hi,
when I run any search the date format is MM/DD/YEAR.
how can I change the format to appear as DD/MM/YEAR ?

Tags (4)
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi sbeamro,

Either change the URI from en-US to en-GB or use the convert command to do this on selected fields http://docs.splunk.com/Documentation/Splunk/6.2.1/SearchReference/Convert

hope this helps ...

cheers, MuS

View solution in original post

MuS
SplunkTrust
SplunkTrust

Hi sbeamro,

Either change the URI from en-US to en-GB or use the convert command to do this on selected fields http://docs.splunk.com/Documentation/Splunk/6.2.1/SearchReference/Convert

hope this helps ...

cheers, MuS

sbeamro
Explorer

thanks for the information !
is it possible to change it on the server level ? or only per search ?

0 Karma

MuS
SplunkTrust
SplunkTrust

You can change this on server level take a look here http://answers.splunk.com/answers/177614/how-to-make-en-gb-default-in-url.html

0 Karma

sbeamro
Explorer

the only solution that works was to change in the address bar to be -
http://splunk:8000/en-GB/
non of the other answers make splunk to go by default to the en-GB format.

0 Karma

MuS
SplunkTrust
SplunkTrust
0 Karma

sbeamro
Explorer

nice !
should I mark this question as answered ?
it seems that there is no server's side solution for it.

0 Karma

MuS
SplunkTrust
SplunkTrust

If it answered your question, feel free to do so 😉

0 Karma
Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...