Description

This article provides information on essential Checks to be performed When Security Director Shows Different Log Timestamps.

 

Symptoms

 

  • Possibly due to Time miss match between Junos space, SDI and SRX time
  • Junos Space is showing incorrect time, possibly due to an issue with NTP time synchronization.
  • SDI is showing an incorrect time, possibly due to an issue with NTP time synchronization.
  • SRX Device is showing an incorrect time, possibly due to an issue with NTP time synchronization.

 

 

Solution

 

  • Verify the Time in Junos space:

The time is displayed as seen below in the UI:

 

 

To see the time set on the Junos Space host from the command line, use the following command:

[root@space-000c ~]# date
Wed Apr 30 14:17:31 UTC 2014

 

Note that the time zone displayed in the command line is in UTC. The time displayed in the Junos Space Interface is the same as the Junos Space command line, but converted to the local PC's time zone.

If the time displayed in Junos space is wrong, refer to: KB22923 - Changing the time zone in Junos Space [juniper.net] to change the time.

 

  • Verify the Time in Security Director Insight:

To see the time set on the Security Director Insight from the command line, use the following command:

SDI:Core# server
Entering the server configuration mode...
SDI:Core#(server)# show clock
Fri Nov 22 07:20:02 UTC 2024

 

If the time displayed in SDI is wrong, refer to: KB83590 - How to set or change localtime, timezone or NTP settings on Security Director Insights [juniper.net] to change the time.

 

Note: To avoid the time sync issue between JunosSpace and the Security director insight as log collector make sure the same local time, the current timezone, or NTP is synchronized on both servers.  

 

  • Verify the Time in SRX device,

To see the time set on the SRX device from the command line, use the following command and verify the current time : 

root@:~ # cli
root> show system uptime
Current time: 2024-11-22 07:52:36 UTC
Time Source:  NTP CLOCK
System booted: 2024-11-12 09:55:51 UTC (1w2d 21:56 ago)
Protocols started: 2024-11-12 09:57:16 UTC (1w2d 21:55 ago)
Last configured: 2024-11-14 09:37:50 UTC (1w0d 22:14 ago) by root
 7:52AM  up 9 days, 21:57, 1 users, load averages: 1.34, 1.39, 1.43

 

If the time displayed in SRX is wrong, refer to: KB15756 - Getting Started - Configure Time and NTP Client [juniper.net] to change the time. If you still face any issue in changing the time in SRX, please reach out to SRX JTAC.

 

Note: If you face any issues, please contact JUNIPER JTAC Support for assistance.

 

Modification History

2024-11-22 : Article Created

2024-12-04: Minor changes and changed visibility