cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted
Ankur_Datta
Nickel

Log exporter send logs in UTC time zone to syslog server

Hi All,

 

We configured log exporter on our MLM and send logs of all CLM to syslog server. On checking on syslog server we found out logs are coming in UTC Time zone. I gone through sk133472 and not able to understand the last two lines.

 

"The CP Log Server can send logs to syslog in different timezone, and it needs to be UTC so target Log Server can convert it to the local timezone.

This is also how Splunk and other SIEM vendors behave."

Is this means we need to send logs through log exporter in UTC time zone

We are using IST time zone. 

 

Please guide.

3 Replies
Admin
Admin

Re: Log exporter send logs in UTC time zone to syslog server

What it means is that Log Exporter will always send logs in UTC format as this is what other vendors are expecting to receive it in.
0 Kudos
Ankur_Datta
Nickel

Re: Log exporter send logs in UTC time zone to syslog server

Is there any way we can change the timezone and syslog get logs in timezone we are using?

0 Kudos
Admin
Admin

Re: Log exporter send logs in UTC time zone to syslog server

While @Dan_Zada can confirm, I believe this is not currently possible and would require an RFE.
The SK indicates Log Exporter sending syslogs in UTC is expected, RFC-compliant behavior.

0 Kudos