Splunk Search

Is it possible to change the date format when running search?

sbeamro
Explorer

Hi,
when I run any search the date format is MM/DD/YEAR.
how can I change the format to appear as DD/MM/YEAR ?

Tags (4)
1 Solution

MuS
Legend

Hi sbeamro,

Either change the URI from en-US to en-GB or use the convert command to do this on selected fields http://docs.splunk.com/Documentation/Splunk/6.2.1/SearchReference/Convert

hope this helps ...

cheers, MuS

View solution in original post

MuS
Legend

Hi sbeamro,

Either change the URI from en-US to en-GB or use the convert command to do this on selected fields http://docs.splunk.com/Documentation/Splunk/6.2.1/SearchReference/Convert

hope this helps ...

cheers, MuS

sbeamro
Explorer

thanks for the information !
is it possible to change it on the server level ? or only per search ?

0 Karma

MuS
Legend

You can change this on server level take a look here http://answers.splunk.com/answers/177614/how-to-make-en-gb-default-in-url.html

0 Karma

sbeamro
Explorer

the only solution that works was to change in the address bar to be -
http://splunk:8000/en-GB/
non of the other answers make splunk to go by default to the en-GB format.

0 Karma

MuS
Legend
0 Karma

sbeamro
Explorer

nice !
should I mark this question as answered ?
it seems that there is no server's side solution for it.

0 Karma

MuS
Legend

If it answered your question, feel free to do so 😉

0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...