12-13-2011 07:24 AM - edited 03-10-2019 06:38 PM
I am sending TACACS administration logging to a syslog server. When the messages show up on the syslog server, they are 5 hours ahead of the actual time. Time on the ACS is correct - local logging shows the correct time. Time on the syslog server is correct...all other devices/systems sending syslog messages to it are coming through with the correct time.
Any ideas as to why the ACS syslog messages would be 5 hours ahead?
Thanks!
12-15-2011 09:40 PM
Are you in the eastern timezone (or are the ACS located there), I am thinking the logs are being sent in UTC format, are you using an acs appliance or is this acs for windows?
12-20-2011 05:44 AM
Thanks for the reply Tarik.
We are in the EST time zone. The time on the ACS is set correctly - all of the logs on the ACS itself are fine. It is a 1113 appliance.
It does seem they are being sent in UTC. Everything else on that syslog server is fine for time - it's just the ACS syslogging.
12-20-2011 10:32 AM
I opened a case - solved very quickly. There is a "Date Format Control" option in the System Configuration specifically for syslog. Now of course I feel silly that I didn't even notice it.
Thanks!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide