I saw this discussed in a thread from last fall, but I am on v 1.5.1 and the email alerts from OSSEC look like this:
Date: Wed, 27 Aug 2008 09:12:08 -0000 Note the offset of -0000. So my mail client (outlook) is interpreting that as UTC and showing it to me as 05:12 ET ( I am in ET ). Thanks, Mitch
