Splunk Search

Time zone question?

jangid
Builder

My logs are coming from different time zone, that is ahead 4.5 hrs.

I know I can't specify the time zone in Universal Forwarder so I added in my propes.conf

[host::maa1devbld32]
TZ = Asia/Kolkata

now when I search log last 12 hrs, I can't see any log but in All Time I can see everything.
So How to convert log view to my current time zone.

Tags (2)
0 Karma
1 Solution

sdaniels
Splunk Employee
Splunk Employee

Go to Manager » Your account » admin to set your specific user timezone.

View solution in original post

sdaniels
Splunk Employee
Splunk Employee

Go to Manager » Your account » admin to set your specific user timezone.

Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

Ready to master Kubernetes and cloud monitoring like the pros?Join Splunk’s Growth Engineering team for an ...

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...