You need to force splunk to use a locale that has the date format you want.
In your case probably en_GB.
Quickfix: You can override the locale in the url - e.g. https://splunk/en-GB/app/search/...
Better fix: The default locale is specified by the browser - e.g. in prioritised order in chrome://settings/languages.
Your problem is probably that your actual preferred language is not supported by splunk, and the first one that in the list that splunk recognises is american english.
Add UK english and place it higher than american english and you should be OK.
Just make sure you remove any hardwired "en-US/" override from your URL.
Proper fix: I cannot think of a single reason why date presentation format should not be made a simple user preference, independently of available translation languages and having to know the obscure techicalities of which locale splunk will actually end up using.
The locales supported by splunk are de_DE, en_GB, en_US, fr_FR, it_IT, ja_JP, ko_KR, zh_CN, and zh_TW.
Source: https://docs.splunk.com/Documentation/Splunk/6.2.1/Admin/Userlanguageandlocale
... View more
