My realtime dashboard on splunk head has an option to select which country will the source be coming. Example is when i clicked Brazil, the realtime search on the splunk head is still using my country's timezone (Manila). The initial steps i did is to change the indexers props.conf with the appropriate TZ for brazil and changed the headers xml code to rt@d-10h but to no avail.
hope you can help advise. thanks.