Technical Tip: Raw logs shows a different time to the displayed time in the FortiAuthenticator GUI

[jcastellanos]

Description	This article describes that when a user downloads the raw logs from GUI, a difference in time to the GUI Log can be noticed.
Scope	FortiAuthenticator v6.5.x.
Solution	The user notices that the timezone is accurately configured. Example: The logs in the GUI show the correct time according to the timestamp. Example: But when downloading the raw logs under Log Access -> Log -> Download Raw Logs, It shows a different time: date=2024-01-14 time=15:13:25+0000 oid=49327 logid=20994 cat="Event" subcat="Authentication" level="information" nas="192.168.35.1" action="Login" status="Success" msg="Web access granted to 'admin'" user="admin" It is expected that the timezone on downloaded raw logs will always be UTC+00. For this example, the timezone is GMT -6. If subtracting 6hrs to time(time=15:13:25) in the raw log, the same time as GUI(9:13:25) will be obtained.