I have no problems with other connectors.
Security Events (FW)
Service Events
System Events (PIX and IOS Connector)
User Logons (received from LEM Agent)
and
LEM Agent installed on workstation
For those filters above, both InsertionTime and DetectionTime are the same (or similar).
Example of InternalNewToolData for Cisco NX-OS:
Double checked time settings.
Hypervisor Time = Guest Time (synchronization enabled).
LEM appliance looks fine.
Best regards,
Matt