We have a host sending logs in UTC timezone and we want to display it in US/Central timezone.
I have added the below configuration in the props.conf file on our indexer, but this does not help.
[host::(name of the host)]
TZ = US/Central
Where do I need to edit the props.conf file? Search head? Indexer? Deployment server?
Can somebody please assist?
↧