Mismatch in Timestamps Between ossec.log on Server and Web Interface

[sakib789]

Wazuh version	Component	Install type	Install method	Platform
4.7.3	-	Manager	-	Ubuntu22.04

Dear Team,

While working with this community, I've observed a notable time variance between the timestamps recorded in the ossec.log on the server and those displayed in the web interface for the same log.

Firstly, when accessing the ossec.log directly on the server at /var/ossec/log/ossec.log, I'm able to view the logs in real-time, as depicted in the accompanying image.

Furthermore, I've also explored accessing logs in real-time via API requests from both the server and the web interface(API Console), as illustrated in the provided images.

My Wazuh server is configured to record logs in local time.

Despite my attempts to align the time settings on the web interface with both browser time and local time, I consistently encounter a discrepancy where the timestamps displayed for ossec.log in the web interface appear to be ahead of my local time, regardless of whether it's in UTC or local time.

I kindly request your assistance in investigating and sharing your insights into this matter.

[sakib789]

It seems the issue is resolved in the latest version(4.8.1)

[Antyrael]

I am running Wazuh Manager v4.8.2 and my agents are also v4.8.2, but I'm still seeing the timestamp discrepancy.

The timestamps shown on the dashboard are 2 hours in the future:

@sakib789 did you do anything else to get these timestamps the same?