Description

This article explains how to fix the log collector time sync issue.

Symptoms

Log collector and Junos space time will not be in sync.

 

Logs and events in the Security director will not be visible.

Solution

Need to set same time and date in both Log collector and the Junos space.

Please find the below lab output:

Step 1:

Login to Junos space CLI:

[root@space-005056a91fcc ~]# date

Fri Jul 5 01:12:44 UTC 2024


Step 2:

Now logging into SDI CLI and enter into server mode

sdi-lc-pe:Core# server 

Entering the server configuration mode...

sdi-lc-pe:Core#(server)# 


Step 3:
Then check the time is matching with the Junos space time

sdi-lc-pe:Core#(server)# set clock 

Setting Date and Time

Current date and time is: 

Fri Jul 5 06:59:49 UTC 2024

As per the above the time is showing in correctly in SDI and hence we need to change it.

Step 4:

Now we need to change the time

Please find the below for changing it:

Welcome admin. It is now Fri Jul 5 06:59:28 UTC 2024

sdi-lc-pe:Core# server 

Entering the server configuration mode...

sdi-lc-pe:Core#(server)# set clock 

Setting Date and Time

Current date and time is: 

Fri Jul 5 06:59:49 UTC 2024

Change date and time? (Yes/No)? yes

Enter the current date MM/DD/YYYY: 07/05/2024

Enter the new time in 24-hour format HH:MM: 01:12

Command=date 070501342024

The new date and time are set to:

Fri Jul 5 01:12:00 UTC 2024

 

Now I changed the time according to Junos space which matches the time.

 

Now once you changed the time log out from Junos space UI and check the SD again.

 

Note: In above scenario the Junos space was showing correct time according to my local time, if the Junos space time is incorrect and SDI is showing correct time as per local then we need to change the time of Junos space according to SDI.

Modification History

2024-02-19 : Article Created