0

I have a task to convert Dashboards from Splunk to Kusto.I see the difference in data due to the Splunk has the data table in UTC time zone but I think Kusto is taking my local Time zone. 1) Is there a way to Query in Kusto to identify the current Time zone for Data . 2) Convert Kusto table or Query to use the UTC time zone to match with Splunk Data. Thanks.

4

1 回答 1

2

quoting the documentation:

A datetime value in Kusto is always in the UTC time zone. Displaying datetime values in other time zones is the responsibility of the user application that displays the data, not a property of the data itself. Should time zone values be required to be kept as a part of the data, a separate columns should be used (providing offset information relative to UTC).

于 2021-10-05T16:48:25.077 回答