Question about timezone of syslog data sent from ACS SE

snakayama — Sun, 10 Mar 2019 22:02:25 GMT

Hi everyone,

I configured timezone on both ACS SE and Syslog server as Japan timezone GMT-9.

And I configured to get the ACS SE send "Failed Attempts log" to Syslog server,

but the timestamp of the logged messages on Syslog server which sent from ACS SE

are displayed by GMT not GMT-9.

Attached file is the sample of logged messages on Syslog server.

In the attached file, the FailedAuth message was logged at 11:54:14, but in fact,

this message was generated and logged at 02:55:03 this means GMT-9

(11:54:14 minus 9:00:00).

My question is, Can and How I configure the timezone on ACS SE to get the syslog message

sent from ACS SE displayed by GMT-9.

ACS SE version is Release 4.1(1) Build 23 Patch 1.

Your information would be appreciated.

Best regards,

Re: Question about timezone of syslog data sent from ACS SE

snakayama — Mon, 19 Mar 2007 05:57:08 GMT

Hi everyone,

I found the following DDTS

----------

Known Caveats with ACS Solution Engine 4.1

CSCee89510

Dates are logged in local time instead of GMT.

Symptom

NAC attributes that are in date format are in GMT time zone.

When ACS logs these attributes, it converts them to ACS local time zone of the server.

Workaround: Configure ACS to use the GMT time zone.

----------

I think this DDTS might be related of this issue I posted above and I need to wait until this

DDTS fixed to clear this issue.

So I changed the ACS on our lab to be used GMT not GMT-9 as timezone, the logged messages

on the syslog server displayed with GMT-9, that is, the timezone of logged message convert to

local timezone of the server.

In the case of OK (logged messages displayed with correct Japan time):

ACS server's timezone: GMT

ACS server's time(clock): correct Japan time

Syslog server's time(clock): correct Japan time

In the case of NG (logged messages are not displayed with correct Japan time):

ACS server's timezone: GMT-9

ACS server's time(clock): correct Japan time

Syslog server's time(clock): correct Japan time

Only differentiation between OK and NG is the setting of the timezone on the ACS.

Would you please let me know if you have any comment.

Best regards,