Security Onion one day behind

[TheWanderer1983]

Version

2.4.130

Installation Method

Security Onion ISO image

Description

configuration

Installation Type

Standalone

Location

on-prem with Internet access

Hardware Specs

Exceeds minimum requirements

CPU

14

RAM

64 gig

Storage for /

300 gig

Storage for /nsm

1.7 TB

Network Traffic Collection

tap

Network Traffic Speeds

Less than 1Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

Yes, there are salt failures (please provide detail below)

Logs

No, there are no additional clues

Detail

Hello all,
I had incorrect time/date set on my Security Onion server (It was one day behind). After correcting it via https://docs.oracle.com/en/operating-systems/oracle-linux/6/admin/ol_system_datetime.html
I restarted SO. It now displays correctly on the system when logged in via ssh.

After fixing it, when I create something like a case, it won't display the case in the case window when displaying the last 24 hours. If I click the custom time frame and press the Today button. It thinks the Today( 13th) is still yesterday. It will put in the range 2025/03/12 12:00:00am - 2025/03/12 11:59:59pm. If I then change it to 2025/03/13 12:00:00am - 2025/03/13 11:59:59pm. The cases that were created on the 13th displays. This issue is happening with alerts and dashboard also.

Under options the correct time zone is set.

I'm in Australia, today is the 13th.

Guidelines

• I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.

[TheWanderer1983]

All good turns out it was just my browser which changes up the time zone.

[dougburks]

For others who may find this discussion, here's our official documentation for UTC and Time Zones:
https://docs.securityonion.net/en/2.4/timezones.html