ACS View Timestamp and ACS Timestamp inconsistant

[Richard Bradfield]

     Just in the process of bringing ACS5.3 online.

see table below some times match others don't, all timezones setup correctly in ACS and devices WLCs and ASAs

any ideas?

ACS View Timestamp	ACS Timestamp	RADIUS Status	NAS Failure	Details	Username	MAC/IP Address	Access Service	Authentication Method	Network Device	NAS IP Address	NAS Port ID	CTS Security Group	ACS Instance	Failure Reason
Sep 10,12 7:46:05.326 AM	Sep 10,12 7:46:05.310 AM				wipbin_client	00-15-70-a8-e1-b9	All Radius users	EAP-FAST (EAP-MSCHAPv2)	DEVWLC01-TACACS+_DEVWLC01	172.16.140.200			CHIACS71
Sep 10,12 7:41:21.943 AM	Sep 10,12 7:41:21.930 AM				wipbin_client	00-15-70-a8-e1-b9	All Radius users	EAP-FAST (EAP-MSCHAPv2)	DEVWLC01-TACACS+_DEVWLC01	172.16.140.200			CHIACS71
Sep 10,12 7:38:59.863 AM	Sep 10,12 7:38:59.843 AM				wipbin_client	00-15-70-a8-e1-b9	All Radius users	EAP-FAST (EAP-MSCHAPv2)	DEVWLC01-TACACS+_DEVWLC01	172.16.140.200			CHIACS71
Sep 10,12 7:35:33.410 AM	Sep 9,12 9:35:48.020 PM				chntando	124.189.181.77	All Radius users	PAP_ASCII	CHEPIX1_pix-firewall	172.16.7.239			DRSACS71
Sep 10,12 7:34:34.560 AM	Sep 10,12 7:34:34.536 AM				wipbin_client	00-15-70-a8-e1-b9	All Radius users	EAP-FAST (EAP-MSCHAPv2)	DEVWLC01-TACACS+_DEVWLC01	172.16.140.200			CHIACS71
Sep 10,12 7:33:35.106 AM	Sep 9,12 9:33:49.710 PM				chjmcgif	138.217.68.1	All Radius users	PAP_ASCII	CHEPIX1_pix-firewall	172.16.7.239			DRSACS71
Sep 10,12 7:32:53.423 AM	Sep 9,12 9:33:08.013 PM

[Tarik Admani · Accepted solution]

Hi,

The time differences seem to be coming from the DRSACS71 instance, is that server in a different timezone? The ACS view timestamp is the timestamp of when the log was received to the monitoring collector, the ACS timestamp is the time that the event took place. Can you issue a show clock on both boxes to see if the minutes are the same?

Thanks,

Tarik Admani
*Please rate helpful posts*

[Richard Bradfield]

You are right I missed the timezone command on DRSACS71

now corrected