Splunk Search

How to change timezone from CST to EST during search time?

splunker9999
Path Finder

Hi,

Can you please help us in changing time from central to EST during search time? We have our server in central zone and hence we are seeing time as CST.

index=sa host=central.1 sourcetype=tidal_log "external" NOT "exec" NOT "*Process ID"  | table _time,jcode, jname, jstatus | sort -_time, jstatus
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

The time you see is controlled by your user's settings, change that by clicking your name in the top centre.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

I've set my time zone to Eastern, note how it translates 11pm CET / UTC+1 into 6pm EDT / UTC-4 in the time column next to the raw data.

alt text

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

When you search for index=sa host=central.1 sourcetype=tidal_log | head 10 you should see the raw data, and to the left of the raw data there should be a time column. That time column should be displayed in your user's time zone, ie EDT. The raw data could be in any time zone.

0 Karma

splunker9999
Path Finder

Hi, I dont see any time column.

Could notice below fields available , but I dont believe these are useful to list time in EST
date_hour
date_sec...

date_zone
tiemendpos
timestartpos

0 Karma

splunker9999
Path Finder

I have that one as US/Eastern only, but since our data center is their in CST and I am just assuming it may be reason?

Can there be any possibility to format time during search time using eval time?

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...