Time zone inconsistency

Comments

1 comment

  • Official comment
    Avatar
    Raghu Murthy

    Hi Bartu,

     

    The collector default is UTC timezone. Therefore in the first message the entry of "171212 14:28:18" is interpreted with a time stamp format of "yyMMdd HH:mm:ss". Consequently Sumo interprets the message time as Dec 12 2017 14:28:18 UTC and in your user account which has UTC+0100 the message time is displayed as Dec 12 2017 15:28:18 UTC+0100.

     

    You can go to the Collection dashboard by going Manage Data -> Collection in the side nav bar and find the collector in question , hover to the right and click on Edit Collector and change the collector default to the correct timezone according to the timezone the server is on. After that the message time and receipt times should be comparable when you search with "Use Receipt time" checked as long as there is not much ingestion latency

     

    Hope that helps

     

    Regards

    Raghu

     

     

Please sign in to leave a comment.