Skip to main content
MOHAMMAD_ALAVI
MOHAMMAD_ALAVI
New Member
January 21, 2013
Question

Log Time Error

  • January 21, 2013
  • 3 replies
  • 4663 views
Hi I have faced this issue that logs time is not same as appliance time. in the meantime the appliance time has set correctly and it doesn' t use any NTP server.(Defined statically). can you help me? thanks

    3 replies

    rwpatterson
    rwpatterson
    New Member
    January 21, 2013
    How far apart is the log time from the real time? Could it be a time zone setting is off somewhere?
    MOHAMMAD_ALAVI
    MOHAMMAD_ALAVIAuthor
    New Member
    January 22, 2013
    hi it one hour over the appliance time. no, time zone setting is on
    Dave_Hall
    Dave_Hall
    New Member
    January 22, 2013
    If the timezone is correct, I would next check the dst setting. From the 4.0MR3 handbook.... 
     By default, FortiOS has the daylight savings time configuration  enabled. The system time must be manually adjusted after  daylight saving time ends. To disable DST, in the CLI enter  the commands:       config system global         set dst disable     end
    MOHAMMAD_ALAVI
    MOHAMMAD_ALAVIAuthor
    New Member
    January 23, 2013
    config system global set dst disable thanks for your cooperation.
    Dave_Hall
    Dave_Hall
    New Member
    January 22, 2013
    Played around with the timezone and dst settings. The date/time stamps on the raw log entries should reflect what is listed as the time/date in the GUI. 
     2013-01-22 08:18:45 log_id=0104032140 type=event subtype=admin pri=notice vd=root user=" admin"    ui=GUI(192.168.200.2) action=time_change field=date-time msg=" User admin changed time from Tue Jan 22   08:18:49 2013 to Tue Jan 22 08:18:45 2013 from GUI(192.168.200.2)"     2013-01-22 08:18:21 log_id=0104032140 type=event subtype=admin pri=notice vd=root user=" admin"    ui=console field=dst old_value=enable new_value=disable msg=" User admin changed dst global setting   to disable from console"     2013-01-22 08:17:39 log_id=0104032140 type=event subtype=admin pri=notice vd=root user=" admin"    ui=GUI(192.168.200.2) action=time_change field=date-time msg=" User admin changed time from Tue Jan 22   10:17:44 2013 to Tue Jan 22 08:17:39 2013 from GUI(192.168.200.2)"     2013-01-22 10:17:07 log_id=0104032001 type=event subtype=admin pri=information vd=root user=" admin"    ui=https(192.168.200.2) action=login status=success reason=none profile=" super_admin"  msg=" Administrator  admin logged in successfully from https(192.168.200.2)"     2013-01-22 10:17:04 log_id=0104032002 type=event subtype=admin pri=alert vd=root user=" amdin"    ui=https(192.168.200.2) action=login status=failed reason=" name_invalid"  msg=" Administrator amdin login   failed from https(192.168.200.2) because of invalid user name"     2013-01-22 10:16:57 log_id=0104032003 type=event subtype=admin pri=information vd=root user=" admin"    ui=jsconsole action=logout status=success reason=exit msg=" Administrator admin logged out from jsconsole"     2013-01-22 10:16:57 log_id=0104032003 type=event subtype=admin pri=information vd=root user=" admin"    ui=https(192.168.200.2) action=logout status=success reason=timeout msg=" Administrator admin timed out   on https(192.168.200.2)"     2013-01-22 10:16:57 log_id=0104032140 type=event subtype=admin pri=notice vd=root user=" admin"    ui=GUI(192.168.200.2) action=time_change field=date-time msg=" User admin changed time from Tue Jan 22   06:11:15 2013 to Tue Jan 22 08:16:57 2013 from GUI(192.168.200.2)"     2013-01-22 08:07:01 log_id=0104032001 type=event subtype=admin pri=information vd=root user=" admin"    ui=console action=login status=success reason=none profile=" super_admin"  msg=" Administrator admin logged   in successfully from console"     2013-01-22 08:06:46 log_id=0104032001 type=event subtype=admin pri=information vd=root user=" admin"   ui=jsconsole action=login status=success reason=none profile=" super_admin"  msg=" Administrator admin   logged in successfully from jsconsole"     2013-01-22 08:06:38 log_id=0104032001 type=event subtype=admin pri=information vd=root user=" admin"    ui=https(192.168.200.2) action=login status=success reason=none profile=" super_admin"  msg=" Administrator   admin logged in successfully from https(192.168.200.2)"
    Terms & ConditionsAccessibility statement