I have a strange situation where the timestamp does not match the IIS time. But only in a certain time range. My clients are all set to UTC while my forwarder, search head and indexer are in CDT. The events show the proper time difference of five hours after approximately 8:00am but before then the times are the same. This appears to happen with all the client events. This partial screen shot shows what I’m talking about. Has anyone else seen anything like this?
