Thanks for posting this fix. It worked for me too. On Thursday, January 9, 2014 at 7:27:02 AM UTC-8, Carl Hilinski wrote: > > FIXED. > > /etc/php.ini has a date.timezone line entry. It was commented out. Changed > it to > [Date] > ; Defines the default timezone used by the date functions > ; http://php.net/date.timezone > date.timezone = US/Eastern > > It now reports the time correctly. > > > On Monday, January 6, 2014 1:28:26 PM UTC-5, Carl Hilinski wrote: >> >> When I look in the web ui (beta .8) for Ossec, I see two issues. One is >> that the time is wrong: >> 3 - SSHD authentication success. 2014 Jan 06 18:16:00 >> Rule Id: >> 5715 <http://www.ossec.net/doc/search.html?q=rule-id-5715> >> Location: >> plato.hes.hmc.psu.edu->/var/log/messages >> Src IP: >> x.x.x.x >> Jan 6 13:17:32 plato.hes.hmc.psu.edu sshd[22493]: [ID 800047 auth.info] >> Accepted keyboard-interactive for oracle from x.x.x.x port 62671 ssh2 >> >> >> It's off by seven hours. The line that read 2014 Jan 06 18:16:00 should >> be 2014 Jan 06 01:16:00. Note that the time is correct in the actual log. >> All of the system/clock settings are correct on this redhat 6.4 >> machine. It appears to be a timezone issue...is that set somewhere special? >> >> Second, not all of the agents are listed in the area of the webui window >> that lists the connected machines. While a couple are not listed there, >> they will have activity listed in the Latest Events window. >> >
-- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
