I'm not sure if this is possible, but I'm trying to figure out if there is a way to see what the unadjusted original time stamp was on an event. I'm trying to search across global time zones (CST, PST, GMT, AWST, etc.) to see if regardless of timezone if an event occurred between certain hours. I can do (date_hour > 4 AND date_hour < 21) but that's only against the search users default time zone. I need to search between 4 and 21 in the original data time stamp if that's even possible.
I know I could tag sets of servers by time zone and then have one search per timezone but I would like to have a single search instead of lots of searches running, as well as avoid having to hand update the list everytime we add/remove a server.
Is this possible?
Thanks!