the last keep alive difference current time

[Felipe Andres Concha Sepúlveda]

Hello good afternoon,

I have a question regarding the hours that appear in the kibana agents section

I see that there is a time difference, the current time of my consultation is 12:13 and in the last keep alive it appears to me 14:04:04 Almost two hours ahead.

Do you know why this is due?

[Juan Carlos Rodríguez]

Hi Felipe,

I'll explain what's going on. We added in previous Wazuh app versions a feature to the app so that dates appear with the user's local time. To do this, any date we receive from the server is assumed to come in UTC time, and we add the time difference of the country where the browser is. Well, it seems that your server is configured with the local time of your country, and what the browser is doing is to add the time difference again, so the dates are in the future.

This has been fixed for the new version of Wazuh (3.10), which has just been released. Here you can find the ticket for this issue that has been fixed https://github.com/wazuh/wazuh/issues/3784

So my recommendation is, if possible, that you upgrade to this new version. You can follow this guide to performing the upgrade of Wazuh https://documentation.wazuh.com/3.10/upgrade-guide/upgrading/latest_wazuh3_minor.html#upgrading-latest-minor and the ELK (with the new Wazuh Kibana app) https://documentation.wazuh.com/3.10/upgrade-guide/upgrading-elastic-stack/elastic_server_hard_upgrade.html (From the screenshot I suppose you use 6.8.x)

Hope this helps.

Let us know the results.

Regards,

Juan Carlos