You betcha. UTC is the TZ for SO. That said, when you invoke certain things, you can set the TZ environment variable to an appropriate value when you invoke certain commands so that it uses local time. But the recommended way is just to know what time it is ;).
For instance, here in Colorado at this time of year we are 7 hours ahead of UTC, so 1700 MST is 0000 UTC the next day, and 1900 UTC is 1200 MST. One thing I do fairly often when looking through Bro logs is something like this: $ cd /nsm/bro/logs $ ls -1 2013-02-08/http_eth1.*gz | while read fn;do (export TZ=MST7MDT;zcat $fn | bro-cut -d ts id.orig_h id.resp_h method host uri status_code status_msg);done | fgrep 65.125.242. | less -- Shane Castle Data Security Mgr, Boulder County IT -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of jrm Sent: Tuesday, February 12, 2013 09:49 To: [email protected] Subject: [ossec-list] Re: UTC time Could it be because I am running this in the Security Onion release? On Friday, February 1, 2013 10:25:25 AM UTC-5, jrm wrote: How can I change OSSEC emails to show time other than UTC. I have my system using the correct Eastern time Zone? Thanks -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
