000035772 - Data retention scheduler page uses incorrect time zone in RSA NetWitness 10.6.x

Document created by RSA Customer Support Employee on Nov 23, 2017
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000035772
Applies ToRSA Product Set: NetWitness Logs & Packets / Security Analytics
RSA Product/Service Type: User Interface, Packet Decoder, Concentrator
RSA Version/Condition: 10.6.x
Platform: CentOS
O/S Version: EL6
IssueOn the Data Retention Scheduler page for a Packet Decoder and Concentrator, if a date threshold is set, Security Analytics uses the incorrect time zone to set the time in the backend and local time is converted to UTC time.
WorkaroundUse the local time to set the date threshold. For example, if you want data retention to be scheduled for 11 AM UTC, you need to set the time for 7:00 AM EDT if you are in the EDT timezone.