Splunk Search

Is it possible to change the date format when running search?

sbeamro
Explorer

Hi,
when I run any search the date format is MM/DD/YEAR.
how can I change the format to appear as DD/MM/YEAR ?

Tags (4)
1 Solution

MuS
Legend

Hi sbeamro,

Either change the URI from en-US to en-GB or use the convert command to do this on selected fields http://docs.splunk.com/Documentation/Splunk/6.2.1/SearchReference/Convert

hope this helps ...

cheers, MuS

View solution in original post

MuS
Legend

Hi sbeamro,

Either change the URI from en-US to en-GB or use the convert command to do this on selected fields http://docs.splunk.com/Documentation/Splunk/6.2.1/SearchReference/Convert

hope this helps ...

cheers, MuS

sbeamro
Explorer

thanks for the information !
is it possible to change it on the server level ? or only per search ?

0 Karma

MuS
Legend

You can change this on server level take a look here http://answers.splunk.com/answers/177614/how-to-make-en-gb-default-in-url.html

0 Karma

sbeamro
Explorer

the only solution that works was to change in the address bar to be -
http://splunk:8000/en-GB/
non of the other answers make splunk to go by default to the en-GB format.

0 Karma

MuS
Legend
0 Karma

sbeamro
Explorer

nice !
should I mark this question as answered ?
it seems that there is no server's side solution for it.

0 Karma

MuS
Legend

If it answered your question, feel free to do so 😉

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...