GMT → CST Greenwich Mean Time (GMT): 0:00 AM (0:00)0:30 AM (0:30)1:00 AM (1:00)1:30 AM (1:30)2:00 AM (2:00)2:30 AM (2:30)3:00 AM (3:00)3:30 AM (3:30)4:00 AM (4:00)4:30 AM (4:30)5:00 AM (5:00)5:30 AM (5:30)6:00 AM (6:00)6:30 AM ...
The TZ setting will be set to whatever timezone the forwarding host is in, thus if the Indexer is in CST and the Forwarder is in EST then the TZ set in props.conf on the Indexer for the Forwarder would be set to EST. Splunk will then figure out the difference between the two ...