Help with wrong timestamp UTC on email notification

[Esteban GOUJON]

Hello,

I'm using Wazuh version 4.14.5 and I recently started using mail notification to check when some rules are triggered but when doing this, the timestamp of the mail itself is wrong, it show the UTC+0 even thought I've change every settings to be the UTC+2 (Europe/Paris). It only does it for email notification. For the alerts on the dashboard, the time is correct. Same for the logs sent to wazuh.

To send any mail from wazuh, I'm usint postfix that is connected to gmail.

You can find the mail notification picture on this email.

Thank you for your time,
Esteban GOUJON

[Pablo Ariel Gonzalez]

Hi Esteban,

This looks like a timezone difference between the Wazuh notification timestamp and the original log timestamp.

The email shows:

Wazuh Notification. 2026 Jun 23 14:54:34

while the original log line contains:

Jun 23 16:54:34

That difference matches UTC vs Europe/Paris (UTC+2).

This does not look like a Postfix or Gmail issue. The timestamp at the top of the Wazuh notification is generated by Wazuh when the alert is processed, while the original log timestamp is still shown in the log body.

As a quick validation, please check the Wazuh manager timezone and clock:

timedatectl

However, if the difference is exactly your UTC offset, this is consistent with the current behavior reported for recent Wazuh versions, where alert/email timestamps may be shown in UTC.