{"id":928,"date":"2015-02-17T11:39:23","date_gmt":"2015-02-17T10:39:23","guid":{"rendered":"http:\/\/blog.robinward.com\/?p=928"},"modified":"2015-02-17T11:39:23","modified_gmt":"2015-02-17T10:39:23","slug":"adjusting-log-timestamps-to-localtime-on-cisco-ios-devices","status":"publish","type":"post","link":"https:\/\/robinward.com\/?p=928","title":{"rendered":"Adjusting log timestamps to localtime on Cisco IOS devices"},"content":{"rendered":"<p>Correlating Log files are an important aspect when responding to incidents\/attacks\/outages regarding your Cisco devices.<\/p>\n<p>However I have noticed for a while that my logging timestamps are off an hour from the actual clock synced by NTP.<\/p>\n<p>After some digging I realized that Cisco devices use<br \/>\n<code>service timestamps log datetime<\/code><br \/>\nas a default. You can check the default values using the command:<br \/>\n<code>sh run all | inc timestamp<\/code><br \/>\nIn order for your logs to use the local clock time you need to issue the command<br \/>\n<code>device(config)# service timestamp log datetime localtime<\/code><br \/>\nFrom now on, your logging timestamp should be identical to your local time on the device.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Correlating Log files are an important aspect when responding to incidents\/attacks\/outages regarding your Cisco devices. However I have noticed for a while that my logging timestamps are off an hour from the actual clock synced by NTP. After some digging I realized that Cisco devices use service timestamps log datetime as a default. You can &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/robinward.com\/?p=928\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Adjusting log timestamps to localtime on Cisco IOS devices&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,3],"tags":[],"class_list":["post-928","post","type-post","status-publish","format-standard","hentry","category-cisco","category-net"],"_links":{"self":[{"href":"https:\/\/robinward.com\/index.php?rest_route=\/wp\/v2\/posts\/928","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/robinward.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/robinward.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/robinward.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/robinward.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=928"}],"version-history":[{"count":1,"href":"https:\/\/robinward.com\/index.php?rest_route=\/wp\/v2\/posts\/928\/revisions"}],"predecessor-version":[{"id":929,"href":"https:\/\/robinward.com\/index.php?rest_route=\/wp\/v2\/posts\/928\/revisions\/929"}],"wp:attachment":[{"href":"https:\/\/robinward.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=928"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/robinward.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=928"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/robinward.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=928"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}