IPS Event Viewer: Incorrect Local Time

[joe.andrade]

IEV 5.2 does not show correct local time for Router IOS IPS device. Router has correct local time, logs appear to have correct timestamp, syslog server receiving data shows correct timestamp in native logs.

Related Router Commands:

service timestamps debug datetime msec localtime

service timestamps log datetime localtime

clock timezone PST -8

clock summer-time PST recurring

ntp clock-period 17180236

ntp update-calendar

ntp server 172.18.2.16 source GigabitEthernet0/0 prefer

[aghaznavi]

reset time on IPS (set DST=UTC & UTC offset to 0)

[joe.andrade]

As indicated the Router has the correct time and syslog data received shows correct time. SDEE Message log shows correct time. Issue is with IEV application. See attached for IEV screenshot compared to Router IOS SDM SDEE Message Log.

[joe.andrade]

Changed router time and different offsets and IEV had no affect.