Log Time Error

[MOHAMMAD_ALAVI]

Hi I have faced this issue that logs time is not same as appliance time. in the meantime the appliance time has set correctly and it doesn' t use any NTP server.(Defined statically). can you help me? thanks

[rwpatterson]

How far apart is the log time from the real time? Could it be a time zone setting is off somewhere?

[MOHAMMAD_ALAVI]

hi it one hour over the appliance time. no, time zone setting is on

[Dave_Hall]

If the timezone is correct, I would next check the dst setting. From the 4.0MR3 handbook....

 By default, FortiOS has the daylight savings time configuration
 enabled. The system time must be manually adjusted after
 daylight saving time ends. To disable DST, in the CLI enter
 the commands:
 
    config system global
        set dst disable
    end
 

[MOHAMMAD_ALAVI]

config system global set dst disable thanks for your cooperation.

[Dave_Hall]

Played around with the timezone and dst settings. The date/time stamps on the raw log entries should reflect what is listed as the time/date in the GUI.

 2013-01-22 08:18:45 log_id=0104032140 type=event subtype=admin pri=notice vd=root user=" admin"  
 ui=GUI(192.168.200.2) action=time_change field=date-time msg=" User admin changed time from Tue Jan 22
  08:18:49 2013 to Tue Jan 22 08:18:45 2013 from GUI(192.168.200.2)" 
 
 2013-01-22 08:18:21 log_id=0104032140 type=event subtype=admin pri=notice vd=root user=" admin" 
  ui=console field=dst old_value=enable new_value=disable msg=" User admin changed dst global setting
  to disable from console" 
 
 2013-01-22 08:17:39 log_id=0104032140 type=event subtype=admin pri=notice vd=root user=" admin" 
  ui=GUI(192.168.200.2) action=time_change field=date-time msg=" User admin changed time from Tue Jan 22
  10:17:44 2013 to Tue Jan 22 08:17:39 2013 from GUI(192.168.200.2)" 
 
 2013-01-22 10:17:07 log_id=0104032001 type=event subtype=admin pri=information vd=root user=" admin" 
  ui=https(192.168.200.2) action=login status=success reason=none profile=" super_admin"  msg=" Administrator
 admin logged in successfully from https(192.168.200.2)" 
 
 2013-01-22 10:17:04 log_id=0104032002 type=event subtype=admin pri=alert vd=root user=" amdin" 
  ui=https(192.168.200.2) action=login status=failed reason=" name_invalid"  msg=" Administrator amdin login
  failed from https(192.168.200.2) because of invalid user name" 
 
 2013-01-22 10:16:57 log_id=0104032003 type=event subtype=admin pri=information vd=root user=" admin" 
  ui=jsconsole action=logout status=success reason=exit msg=" Administrator admin logged out from jsconsole" 
 
 2013-01-22 10:16:57 log_id=0104032003 type=event subtype=admin pri=information vd=root user=" admin" 
  ui=https(192.168.200.2) action=logout status=success reason=timeout msg=" Administrator admin timed out
  on https(192.168.200.2)" 
 
 2013-01-22 10:16:57 log_id=0104032140 type=event subtype=admin pri=notice vd=root user=" admin" 
  ui=GUI(192.168.200.2) action=time_change field=date-time msg=" User admin changed time from Tue Jan 22
  06:11:15 2013 to Tue Jan 22 08:16:57 2013 from GUI(192.168.200.2)" 
 
 2013-01-22 08:07:01 log_id=0104032001 type=event subtype=admin pri=information vd=root user=" admin" 
  ui=console action=login status=success reason=none profile=" super_admin"  msg=" Administrator admin logged
  in successfully from console" 
 
 2013-01-22 08:06:46 log_id=0104032001 type=event subtype=admin pri=information vd=root user=" admin" 
 ui=jsconsole action=login status=success reason=none profile=" super_admin"  msg=" Administrator admin
  logged in successfully from jsconsole" 
 
 2013-01-22 08:06:38 log_id=0104032001 type=event subtype=admin pri=information vd=root user=" admin" 
  ui=https(192.168.200.2) action=login status=success reason=none profile=" super_admin"  msg=" Administrator
  admin logged in successfully from https(192.168.200.2)"