TS_OFFSET

Use TS_OFFSET to adjust the event timestamps streamed to the appliance.

Required
No
Default
No default (no offset)
Permitted Values
E|W
East or west offset from GMT
HH
Number of hours
MM
Number of minutes
Description
You can adjust event timestamps streamed to the appliance by specifying the amount of time offset by time zone. For example, if you are adjusting the offset of time zone UTC 0.0 from time zone UTC + 9, GMT, the UTC 0.0 time zone is west of and nine hours earlier than UTC + 9. In this example, event timestamps are offset by subtracting 9 hours from the original timestamp, resulting in TS_OFFSET(W.09.00).
If you do not configure TS_OFFSET, the timestamps streamed to the appliance are not adjusted for timezone.
Notes
None
Syntax
TS_OFFSET(E|W.HH.MM)
Example
TS_OFFSET(W.09.00)