Forum Discussion

GaryBushey's avatar
GaryBushey
Bronze Contributor
Apr 01, 2020

Azure Sentinel Logs time settings not working

I have set the Date & Time in my Azure Sentinel Logs Settings pane to use Local Time but whenever I run a query, I still need to change the Display time from UTC to local time.  Correct me if I am wr...
GaryBushey's avatar
GaryBushey
Bronze Contributor
Apr 14, 2020

Sarah_Young Thank you for your reply however I don't think I was clear enough in my description. 

 

While initially the results are showing date/time in UTC time zone, it was my understanding, and I am pretty sure it used to work, that changing this setting would then change the time zone used to display the date/time field in the result section of the Logs page anytime you ran a new query.  Much like you can change the time zone in the results section for each individual query you run.

 

If that is the the intended use of that setting, then what is it used for?

 

UPDATE: Upon further testing, it seems that the initial tab created when you first go into Logs ignores this setting but any other tabs you open uses it.

Sarah_Young's avatar
Sarah_Young
Icon for Microsoft rankMicrosoft
Apr 19, 2020

GaryBushey yes, I understand your question now. You're right that queries will default to UTC the first time you open a Log Analytics tab but you can change it here, and subsequent queries should show your local time:

 

 

Thanks!

Sarah