There is (was?) SPL-46852 If you change the time zone of the current Splunk Web user to be different from the server time zone, you will not see the change take effect immediately. The retrieved events will be in the correct time zone but the timeline will not. Wait 30 seconds and reload the page to see the updated timeline. but I do not think the issue I have is exactly the same because my Splunk servers and web browser (Firefox) are both in another time zone while I'm using this over Citrix XenApp. I get: If you change the time zone of the current Splunk Web user to be different from the server time zone, you will not see the change ever despite waiting and refreshing. I tested the web browser via the java console and it is most definitely in the same time zone as the Splunk servers which is a different time zone from the user, and the user has set their time zone to the time zone they are in. The log files are parsed so the time zone matches the log entry and it also matches the time zone Splunk Web is in and the user is in. Only the timeline time zone is off and it is the time zone of the Splunk servers and the web browser. This Splunk installation is under the control of our PaaS provider, so I can't modify it or open a bug report. ... View more