Hello everybody,
sorry in advance for my english language, not my native language.
Well, i encounter a little trouble when i export SEP Log to RSA system.
Explication : When i launch a test on a computer or server, SEP detect well any incident.
All log are well sent to RSA system (log correlator), but the trouble is in the log : the event time is not good.
I use NTP in all my servers and computer, all are running with the same time.
When i read the log received on RSA monitoring, i have one hour difference, certainly due to time zone used.
I'm searching without any success, how to send log from SEPM to RSA system with the good time zone's event time !
If anybody have a solution, or a kind of "how to" to modify this blockage point, no alert are actually shown, because of this time difference.
Thanks,
Stef