Splunk Search

Is it possible to change the date format when running search?

sbeamro
Explorer

Hi,
when I run any search the date format is MM/DD/YEAR.
how can I change the format to appear as DD/MM/YEAR ?

Tags (4)
1 Solution

MuS
Legend

Hi sbeamro,

Either change the URI from en-US to en-GB or use the convert command to do this on selected fields http://docs.splunk.com/Documentation/Splunk/6.2.1/SearchReference/Convert

hope this helps ...

cheers, MuS

View solution in original post

MuS
Legend

Hi sbeamro,

Either change the URI from en-US to en-GB or use the convert command to do this on selected fields http://docs.splunk.com/Documentation/Splunk/6.2.1/SearchReference/Convert

hope this helps ...

cheers, MuS

sbeamro
Explorer

thanks for the information !
is it possible to change it on the server level ? or only per search ?

0 Karma

MuS
Legend

You can change this on server level take a look here http://answers.splunk.com/answers/177614/how-to-make-en-gb-default-in-url.html

0 Karma

sbeamro
Explorer

the only solution that works was to change in the address bar to be -
http://splunk:8000/en-GB/
non of the other answers make splunk to go by default to the en-GB format.

0 Karma

MuS
Legend
0 Karma

sbeamro
Explorer

nice !
should I mark this question as answered ?
it seems that there is no server's side solution for it.

0 Karma

MuS
Legend

If it answered your question, feel free to do so 😉

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud's AI Assistant in Action Series: Auditing Compliance and ...

This is the third post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...