Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Time discrepancy on reported events

Time discrepancy on reported events

Version

6.0.2.x, 7.X.

 

Issue

Reported events for new file are showing up on the Bit9 Console exactly one hour in the past when compared to the time displayed for Date Created on the File Details page. Both endpoint and Bit9 Server are set to (UTC) Universal Coordinated Time (there is no Daylight Savings check-box for this time zone).

 

Symptoms

The 'Date Created' event appears to be exactly 1 hour ahead of the 'First Seen Date' and 'Last Updated' information on the File Details page.

 

Cause

The time zones on the Bit9 Server and endpoint may be in sync, but the Bit9 Console must also be set to the matching time zone, not just left as 'automatic'. The 'automatic' setting checks against SQL for the time zone confirmation.

 

Solution

Open the Bit9 Console. Click on Administration > System Configuration > General > Click on Edit. Use the 'Server Timezone' drop down menu and select the corresponding time zone to correspond with your Bit9 Server and endpoint.

 

Important Note(s)

Time zone difference might be more than 1 hour, but the concept should still apply. The Bit9 Server, Bit9 Agent and Bit9 Console should all apply matching time zones, taking daylight savings into consideration.

 

Related Solution(s)

Time discrepancy within the Bit9 Console.

Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎01-08-2015
Views:
651
Contributors