"Mark Arnold [MVP]" wrote:

> On Tue, 3 Mar 2009 09:50:07 -0800, smith777
> <smith***@discussions.microsoft.com> wrote:
>
> >We're running Exchange 2007 sp1 and have Content Filtering enabled. When i go
> >and look at the logs, they are 5 hours ahead. We're EST (-5 hours) so the
> >logs will show a time stamp of 17:25:08 when it should read 12:25:08. The
> >time on the server is correct as well as the timezone.
> >
> >Is there a setting that i have to set on the server so it reflects -5 hours
> >from GMT?
>
> All logs everywhere are recorded in UTC. We used to own the globe and
> that's the way it is. If they weren't and you were doing message
> tracking for an item traversing servers across the planet you'd have
> an impossible time.
> Whatever log reading/interpreting software you are intending to use
> WILL!! have a tickbox to display the time in the 'local' zone if you
> need.
> You cannot get log files to record in local and since the idea of
> those log files is not (really) for them to be read in a raw format
> but through some tool  - be it a web tracking, message tracking or
> whatever - the tool is the thing that has the logic to do the
> time-slip.
>