Implementing Splunk 7(Third Edition)
上QQ阅读APP看书,第一时间看更新

How Splunk displays time

The text of the original event, and the date it contains, is never modified. It is always displayed as it was received. The date displayed to the left of the event is determined by the time zone of the Splunk instance or the user's preference, as specified in your account: