Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.
Splunk can normalize timestamps based on per-host time offsets that you supply in a configuration file. It also reads and uses timezones in timestamps it finds in log events, if they are present. It normalizes all timestamps to the timezone of the host where the Splunk Server is indexing its data.
