Automatically adjusting timestamps from remote systems based on time zone differences

An apparatus, comprising:

• one or more processors;
• and
• a memory storing instructions that, when executed by the one or more processors, cause the apparatus to:
• while raw time-series data received from a remote system is processed into a plurality of events, identify timestamps that lack time zone or time offset information in the time-series data, and associate a tag with each timestamp to indicate that the timestamp has not been adjusted;
• send, from a computer system to the remote system, a request for a local time of the remote system;
• receive, from the remote system, a response to the request, wherein the response includes the local time of the remote system;
• calculate an elapsed response time by subtracting a time of transmission of the request from a time that the response was received;
• in response to the elapsed response time being greater than a threshold value, resending the request to the remote system until the elapsed response time is less than the threshold value;
• in response to the elapsed response time being within the threshold value, compute a difference between a most recent time of transmission and a most recent received local time of the remote system to determine a time offset that accounts for a difference in time zones between the computer system and the remote system;
• use the time offset to standardize timestamps associated with each event in the plurality of events that has a tagged timestamp, wherein standardizing the timestamps associated with each event comprises adjusting the timestamps to conform to a time standard using the time offset.

A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform:

• while processing raw time-series data received from a remote system into a plurality of events, identifying timestamps that lack time zone or time offset information in the time-series data, and associating a tag with each timestamp to indicate that the timestamp has not been adjusted;
• sending, from a computer system to the remote system, a request for a local time of the remote system;
• receiving, at the computer system from the remote system, a response to the request, wherein the response includes the local time of the remote system;
• calculating an elapsed response time by subtracting a time of transmission of the request from a time that the response was received;
• in response to the elapsed response time being greater than a threshold value, resending the request to the remote system until the elapsed response time is less than the threshold value;
• in response to the elapsed response time being within the threshold value, computing a difference between a most recent time of transmission and a most recent received local time of the remote system to determine a time offset that accounts for a time difference between the computer system and the remote system;
• using the time offset to standardize timestamps associated with each event in the plurality of events that has a tagged timestamp, wherein standardizing the timestamps associated with each event comprises adjusting the timestamps to conform to a time standard using the time offset.