Search code examples
loggingsplunksplunk-query

Display Splunk Timechart in Local Time


I have a very simple timechart query:

index="myIndex" "searchText"
| timechart span=1d

The Splunk logs are in UTC, but I need the chart to display the data in local time instead.


Solution

  • Set your Splunk user profile to the desired time zone.