000035772 - Data retention scheduler page uses incorrect time zone in RSA NetWitness 10.6.x

Document created by RSA Customer Support Employee on Nov 23, 2017Last modified by RSA Customer Support Employee on Jul 10, 2019
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000035772
Applies ToRSA Product Set: NetWitness Logs & Network, Security Analytics
RSA Product/Service Type: User Interface, Packet Decoder, Concentrator
RSA Version/Condition: 10.6.x
Platform: CentOS
O/S Version: EL6
IssueOn the Data Retention Scheduler tab in the RSA NetWitness UI both for a Packet Decoder and Concentrator, if a date threshold is set, RSA Security Analytics uses the incorrect time zone to set the time in the backend, and the local time is converted to UTC time.
WorkaroundUse the local time to set the date threshold. For example, if you would like data retention to be scheduled for 11 AM UTC, you will need to set the time for 7:00 AM EDT if you are in the EDT timezone.