Hi,
I need to change the tz for all the users and roles to Oslo Norway timezone.
(GMT+01:00)
But I cant find system folder under etc folder on our search head.
Instead we have below path:
/opt/splunk/etc/apps/user-prefs/local/user-prefs.conf
/opt/splunk/etc/apps/user-prefs/default/user-prefs.conf
I tried adding below stanzas in /opt/splunk/etc/apps/user-prefs/local/user-prefs.conf and restarted splunk, but its not working.
[default]
tz = Europe/Amsterdam
[general_default]
default_earliest_time = -24h@h
Kindly suggest where I am wrong
Regards,
Ravikiran Shikchi
... View more