I have a certain host that sends several logs from multiple sources using the Linux Universal Forwarder. Most of these logs are written in the host and then to Splunk as UTC although the host is configured with the correct local time. How do I get Splunk to display the local time zone instead of UTC?
↧