Splunk Search

desfased server hour

rjfv8205
Path Finder

Hello splunkers, I have this search:

index = "sti" sourcetype = "Genera_AVI" | fields _time | head 1 | eval tiempo = strftime(now(),"%H:%M:%S") | table tiempo

now() show following time:

13:36:15

But actually it's 12:36

Is it problem with server hour? Where I change it? I have a cluster indexer

Tags (1)
0 Karma

Vijeta
Influencer

check your account settings for timezone, probably its set to EST and you are in CST zone?

0 Karma

rjfv8205
Path Finder

This changed only my account.

Exist a way to change for all users?

0 Karma

Vijeta
Influencer

@rjfv8205 You can let the users change their own timezones. If you want to forcefully change all users timezones then you need to modify user-prefs.conf for all users. See this link below , may be of help-

https://answers.splunk.com/answers/126350/change-multiple-users-timezone.html

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...