fix timezone in splunk log