# \- time diff between bro logs and host clock

**URL:** <https://community.zeek.org/t/time-diff-between-bro-logs-and-host-clock/5501>\
**Category:** Zeek\
**Created:** [October 18, 2018, 9:36am UTC](https://community.zeek.org/t/time-diff-between-bro-logs-and-host-clock/5501 "2018-10-18T09:36:34Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![william\_de\_ping](https://avatars.discourse-cdn.com/v4/letter/w/b19c9b/32.png) [@william\_de\_ping](https://community.zeek.org/u/william_de_ping)\
**Post date:** [October 18, 2018, 9:36am UTC](https://community.zeek.org/t/time-diff-between-bro-logs-and-host-clock/5501/1 "2018-10-18T09:36:34Z")

</div>

Hi all,

Any idea why new bro logs epoch timestamp is about 1 hour earlier than the actual clock of the host ?

I am running a cluster and I was wondering how to fix this issue.

Thank you,  
B

---

<div class="post-metadata">

**Author:** ![seth](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/seth/32/642_2.png) [@seth](https://community.zeek.org/u/seth)\
**Post date:** [October 18, 2018, 4:38pm UTC](https://community.zeek.org/t/time-diff-between-bro-logs-and-host-clock/5501/2 "2018-10-18T16:38:16Z")

</div>

Is it possible that you are converting timestamps into something readable on a system where the timezone is set differently than you expect? One hour off seems suspicious to me as though it might be a timezone issue (although the unix epoch timestamp doesn't have a timezone built into it so the application of timezone only happens when you do the conversion for viewing).

&nbsp;&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:46pm UTC](https://community.zeek.org/t/time-diff-between-bro-logs-and-host-clock/5501/3 "2022-05-06T15:46:08Z")

</div>