How to modify access log to local time stamp

[pakorn]

Hi 

I put access log via rsylog to splunk 

But my customer need to change the time in access log to GMT+7  How to config it ? 

BR

Pakorn

[fw_mon · Accepted solution]

Hello @pakorn 

here are several options:

• change MWG system time zone from UTC to +0700 (Configuraiton > Data and Time)
• Recalculate the timestamp for each log line (Set User-Defined.timeshift = DateTime.ToNumber
  + 25200 then DateTime.ISOString.FromEpoch (User-Defined.timeshift) )
• Modify the timestamp in the rsyslog configuration timezone(id="ITC" offset="+07:00")
• change the TZ property in props.conf on Splunk
• a brute force solution: use DateTime.ISOString and just add "+0700" as a string to "fake" the timestamp

[pakorn]

@fw_mon 

I forget syn ntp time in my customer WMG

after change MWG system time zone from UTC to +0700 (Configuraiton > Data and Time) and ntp sync

 RAW log is change to local time +7:00 but in the rsyslog time stamp still +0:00 

But in my lab and another customer site time stamp is the same value

do you have any recommend ? 

[fw_mon]

try to reboot the mwg, the timestamp should be the same

[pakorn]

After rebooting. the Time is the same thank you.

[VelmaConway]

A secure web gateway is a cloud-based or local network security service. Located between users and the Internet, Secure Web Gateways provide advanced network protection by inspecting web requests in accordance with company policy to ensure malicious websites and applications are blocked and inaccessible.

Secure web gateways are installed as a software component or a hardware device at the edge of the network or at user endpoints. The gateway monitors this traffic for malicious code, uses web applications, and any URL  that users or non-users attempt. 

A secure web gateway is a security solution that seeks to allow unsafe traffic to enter an organization's internal network. Businesses use it to protect their employees and users from access and infection by malicious web traffic, websites, viruses, and malware. It also ensures the implementation and compliance with the organization's regulatory policy.