Describe the enhancement:
Some fortinet logs do not have a tz field to set the timezone from, now we are defaulting to UTC for this, but would be desirable to set a fallback default timezone if this happens.
Describe a specific use case for the enhancement or feature:
When we have a log like
<189>date=2020-07-20 time=08:29:08 devname="name" devid="id" logid="0000000013" type="traffic" subtype="forward" level="notice" vd="root" eventtime=1595226548 srcip=1.1.1.1 srcport=53384 srcintf="src-1243" srcintfrole="dmz" dstip=192.168.1.1 dstport=80 dstintf="port25" dstintfrole="lan" poluuid="aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaa" sessionid=3022129855 proto=6 action="close" policyid=213 policytype="policy" service="HTTP" dstcountry="Reserved" srccountry="Reserved" trandisp="noop" duration=3 sentbyte=2942 rcvdbyte=12589 sentpkt=21 rcvdpkt=28 policyname="name" appcat="unscanned"
we want to be able to define which timezone it is other than UTC
cc\ @P1llus
Describe the enhancement:
Some fortinet logs do not have a
tzfield to set the timezone from, now we are defaulting to UTC for this, but would be desirable to set a fallback default timezone if this happens.Describe a specific use case for the enhancement or feature:
When we have a log like
we want to be able to define which timezone it is other than UTC
cc\ @P1llus