# FortiGate and timezone settings

**URL:** <https://community.graylog.org/t/fortigate-and-timezone-settings/19054>\
**Category:** Graylog Central (peer support)\
**Created:** [March 10, 2021, 7:13am UTC](https://community.graylog.org/t/fortigate-and-timezone-settings/19054 "2021-03-10T07:13:59Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tuumke](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tuumke/32/2549_2.png) [@Tuumke](https://community.graylog.org/u/Tuumke)\
**Post date:** [March 10, 2021, 7:14am UTC](https://community.graylog.org/t/fortigate-and-timezone-settings/19054/1 "2021-03-10T07:14:00Z")

</div>

I’m having a hardtime figuring this out. My fortigate is sending to my graylog, which goes fine. Even tried to work with pipelines and set epoch timestamp to timestamp but those date/times are the same. The fortigate already logs in my timezone, so when i try to search stuff, it’s always an hour behind because my profile is set to timezone Amsterdam. So i have to use absolute, change end date to +1 hour or +1 year to get realtime data. Where does this go wrong? My servers are also running in tz Europe/Amsterdam.

---

<div class="post-metadata">

**Author:** ![Tuumke](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tuumke/32/2549_2.png) [@Tuumke](https://community.graylog.org/u/Tuumke)\
**Post date:** [March 10, 2021, 7:40am UTC](https://community.graylog.org/t/fortigate-and-timezone-settings/19054/2 "2021-03-10T07:40:40Z")

</div>

Figured it out. In the syslog message from the fortgate there is a TZ field which is set to +0100. I guess graylog doesn’t automaticly recognize it. So i did the pipeline suggestion in [here](https://community.graylog.org/t/fortigate-changed-eventtime-from-seconds-to-nanoseconds/18772/2).

All works out now.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [March 24, 2021, 7:41am UTC](https://community.graylog.org/t/fortigate-and-timezone-settings/19054/3 "2021-03-24T07:41:14Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.