I recently started using the Microsoft IIS W3C v7.0 connector to monitor IIS logs on a server. Initially, there was a 5 hour discrepancy between the Insertion Time and the Detection Time. (Detection Time was 5 hours later than Insertion Time. Insertion Time was the correct local time.) The IIS logs are in UCT (with no option to change to local time). The connector configuration has an option to use either GMT (UTC) or local time. I changed it to GMT, but now I have a 1 hour discrepancy between the Insertion Time and Detection Time. (Detection Time is 1 hour earlier than Insertion Time. Insertion Time is the correct local time.) It appears that the issue now is related to Daylight Savings Time. The IIS logs on the server show the correct UCT time, but LEM appears to be modifying the Detection Time by 6 hours instead of 5 hours. Is there any way to get these to match?
By the way, the biggest issue that this is causing is running nDepth queries. Using the drop down time range selectors (last 10 minutes) doesn't show the current data.
Thanks in advance!
Matt