Office 365 Reports -Timezone

%3CLINGO-SUB%20id%3D%22lingo-sub-115817%22%20slang%3D%22en-US%22%3EOffice%20365%20Reports%20-Timezone%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-115817%22%20slang%3D%22en-US%22%3E%3CP%3ECan%20someone%20tell%20me%20which%20timezone%20the%20usage%20reports%20are%20in%3F%26nbsp%3B%20The%20number%20of%20staff%20using%20Outlook%20at%201am%20is%20too%20large%20for%20me%20to%20be%20comfortable%20that%20they%20are%20in%20the%20timezone%20of%20the%20tenancy.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-115817%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-280348%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Reports%20-Timezone%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-280348%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20having%20the%20same%20problem.%26nbsp%3B%20I%20need%20to%20monitor%20and%20report%20on%20weekend%20usage%20but%20can't%20figure%20out%20how%20to%20change%20it%20from%20UCT%20to%20AEST%20(link%20mentioned%20above%20no%20longer%20goes%20anywhere).%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-121555%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Reports%20-Timezone%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-121555%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20(ie%20reporting%20via%20the%20portal)%20really%20is%20a%20very%20unreliable%20part%20of%20O365.%20%26nbsp%3BIt%20briefly%20started%20to%20work%20after%20a%20incident%20was%20raised%20earlier%20in%20the%20week%2C%20the%20incident%20was%20closed%2C%20and%20the%20data%20has%20not%20updated%20since.%20%26nbsp%3B%20%26nbsp%3B%20Is%20anyone%20doing%20any%20RCA%20on%20this%20issue%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-119360%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Reports%20-Timezone%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-119360%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%2C%20Lloyd.%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThere%20is%20currently%20an%20issue%20that%20is%20causing%20a%20delay.%20We're%20working%20on%20fixing%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-119046%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Reports%20-Timezone%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-119046%22%20slang%3D%22en-US%22%3E%3CP%3EI've%20had%20a%20week%20out%20the%20office%2C%20so%20have%20no%20up%20to%20date%20examples.%20%26nbsp%3BWhen%20I%20have%20something%20I'll%20forward%20it%20on.%3C%2FP%3E%3CP%3EUnfortunately%2C%20the%20report%20itself%20is%20also%20a%20week%20out%20of%20date%2C%20which%20makes%20it%20of%20no%20use%20whatsoever.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-116974%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Reports%20-Timezone%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-116974%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Lloyd%2C%3C%2FP%3E%0A%3CP%3Ecorrect%2C%20the%20reports%20are%20in%20UTC.%20Can%20you%20send%20me%20an%20email%20to%20anne.michels%40microsoft.com%20with%20screenshots%20of%20the%20descrepancies%20so%20that%20we%20can%20look%20into%20it%3F%3C%2FP%3E%0A%3CP%3EThanks%2C%3C%2FP%3E%0A%3CP%3EAnne%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-116356%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Reports%20-Timezone%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-116356%22%20slang%3D%22en-US%22%3E%3CP%3EActually%2C%20I'm%20beggining%20to%20suspect%20the%20whole%20RPC%20report.%26nbsp%3B%20Some%20users%20appearing%20on%20it%20assure%20me%20they%20not%20using%20Outlook%202007%20at%20the%20time%20(or%20even%20the%20day)%20it%20reports%20they%20were.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-115878%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Reports%20-Timezone%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-115878%22%20slang%3D%22en-US%22%3E%3CP%3EWas%20aware%20and%20understand%20this.%26nbsp%3B%20However%20the%20report%20is%20one%20of%20the%20standard%20ones%20in%20the%20O365%20portal%2C%20so%20not%20relevant%20(I%20think).%20Thanks%20anyway.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOn%20the%20graph%20that%20is%20displayed%20with%20usage%20reports%20it%20does%20say%20UTC%2C%20but%20I'm%20not%20convinced%20that%20is%20carried%20over%20to%20the%26nbsp%3Bexcel%20downloadable%20report.%26nbsp%3B%20Happy%20to%20be%20proved%20wrong.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-115877%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Reports%20-Timezone%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-115877%22%20slang%3D%22en-US%22%3E%3CP%3EEvery%20site%20has%20a%20time%20zone%20which%20defaults%20to%20Pacific%20Time.%26nbsp%3BEvery%20time%20you%20create%20a%20site%20(or%20a%20Group)%2C%20you%20should%20adjust%20such%20time%20zone%20to%20the%20correct%20one%20(if%20different%20from%20the%20default).%3C%2FP%3E%3CP%3EYou%20can%20do%20it%20either%20by%20PowerShell%20or%20by%20using%20the%20relevant%20site%20page%20(e.g.%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftenant.sharepoint.com%2Fsites%2Fsitename%2F_layouts%2F15%2Fregionalsetng.aspx%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ftenant.sharepoint.com%2Fsites%2Fsitename%2F_layouts%2F15%2Fregionalsetng.aspx%3C%2FA%3E).%3C%2FP%3E%3CP%3EIf%20you%20don't%2C%20you%20will%20get%20wrong%20times%20for%20the%20document%20library%20items%2C%20among%20the%20other%20things.%3C%2FP%3E%3CP%3EAlmost%20surely%20this%20has%20nothing%20to%20do%20with%20your%20problem%2C%20but%20you%20could%20investigate%20about%20it...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-115858%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Reports%20-Timezone%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-115858%22%20slang%3D%22en-US%22%3E%3CP%3EGroup%20timezone%3F%26nbsp%3B%20Perhaps%20I'm%20being%20dense%20this%20morning%2C%20but%20not%20sure%20what%20group%20you%20are%20referring%20to.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-115841%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Reports%20-Timezone%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-115841%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F15390%22%20target%3D%22_blank%22%3E%40Lloyd%20Adams%3C%2FA%3E%3C%2FP%3E%3CP%3EHave%20you%20correctly%20set%20the%20Group%20timezone%3F%20It%20defaults%20to%20Pacific%20Time.%3C%2FP%3E%3CP%3ECould%20this%20be%20the%20reason%3F%3C%2FP%3E%3CP%3EJust%20an%20idea...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-115836%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Reports%20-Timezone%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-115836%22%20slang%3D%22en-US%22%3E%3CP%3EAdding%20here%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F210%22%20target%3D%22_blank%22%3E%40Anne%20Michels%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-115834%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Reports%20-Timezone%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-115834%22%20slang%3D%22en-US%22%3E%3CP%3EUsage%20Report%20%26gt%3B%20Email%20Activity%20uses%20UTC%20timezone%20on%20its%20Last%20Activity%20Date.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20185px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F22043i9ECE830F20F12A05%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Last%20Activity%20Date.png%22%20title%3D%22Last%20Activity%20Date.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-115832%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Reports%20-Timezone%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-115832%22%20slang%3D%22en-US%22%3E%3CP%3EOk%20thanks%20for%20that.%20I'll%20take%20a%20look.%26nbsp%3B%20To%20give%20the%26nbsp%3B%20full%20picture%2C%20this%20is%20for%20the%20report%20that%20shows%20users%20still%20using%20RPC%20to%20connect%20to%20EoL.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-115826%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Reports%20-Timezone%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-115826%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20Lloyd%20Adams%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20doubt%20it%20may%20be%20based%20on%20the%20timezone%20set%20in%20the%20mailbox.%20Can%20you%20check%20the%20timezone%20of%20the%20mailboxes%20which%20were%20reporting%20that%20the%20login%26nbsp%3Boccurred%26nbsp%3Baround%201%20AM%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20used%20Microsoft%20Usage%20Reporting%20API%20directly%20and%20didn't%20find%20any%20mismatch%20in%20the%20timezone%20so%20far.%20If%20you%20need%20to%20view%20the%20data%20based%20on%20your%20current%20timezone%20then%20you%20may%20need%20to%20directly%20access%20the%20API%20or%20use%20any%203rd%20party%20tool.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20can%20try%20the%20below%20tool%20which%20gives%20you%20the%20reporting%20based%20on%20your%20current%20timezone.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fgallery.technet.microsoft.com%2Foffice%2FOffice-365-Auditing-Tool-01747cd4%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgallery.technet.microsoft.com%2Foffice%2FOffice-365-Auditing-Tool-01747cd4%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Regular Contributor

Can someone tell me which timezone the usage reports are in?  The number of staff using Outlook at 1am is too large for me to be comfortable that they are in the timezone of the tenancy.

 

 

Thanks

14 Replies
Highlighted

Hello Lloyd Adams,

 

I doubt it may be based on the timezone set in the mailbox. Can you check the timezone of the mailboxes which were reporting that the login occurred around 1 AM?

 

I have used Microsoft Usage Reporting API directly and didn't find any mismatch in the timezone so far. If you need to view the data based on your current timezone then you may need to directly access the API or use any 3rd party tool. 

 

You can try the below tool which gives you the reporting based on your current timezone.

https://gallery.technet.microsoft.com/office/Office-365-Auditing-Tool-01747cd4

Highlighted

Ok thanks for that. I'll take a look.  To give the  full picture, this is for the report that shows users still using RPC to connect to EoL.  

Highlighted

Usage Report > Email Activity uses UTC timezone on its Last Activity Date.

 

Last Activity Date.png

 

 

Highlighted

Adding here @Anne Michels

Highlighted

@Lloyd Adams

Have you correctly set the Group timezone? It defaults to Pacific Time.

Could this be the reason?

Just an idea...

Highlighted

Group timezone?  Perhaps I'm being dense this morning, but not sure what group you are referring to.

Highlighted

Every site has a time zone which defaults to Pacific Time. Every time you create a site (or a Group), you should adjust such time zone to the correct one (if different from the default).

You can do it either by PowerShell or by using the relevant site page (e.g. https://tenant.sharepoint.com/sites/sitename/_layouts/15/regionalsetng.aspx).

If you don't, you will get wrong times for the document library items, among the other things.

Almost surely this has nothing to do with your problem, but you could investigate about it...

Highlighted

Was aware and understand this.  However the report is one of the standard ones in the O365 portal, so not relevant (I think). Thanks anyway. 

 

On the graph that is displayed with usage reports it does say UTC, but I'm not convinced that is carried over to the excel downloadable report.  Happy to be proved wrong.

Highlighted

Actually, I'm beggining to suspect the whole RPC report.  Some users appearing on it assure me they not using Outlook 2007 at the time (or even the day) it reports they were.

Highlighted

Hi Lloyd,

correct, the reports are in UTC. Can you send me an email to anne.michels@microsoft.com with screenshots of the descrepancies so that we can look into it?

Thanks,

Anne

Highlighted

I've had a week out the office, so have no up to date examples.  When I have something I'll forward it on.

Unfortunately, the report itself is also a week out of date, which makes it of no use whatsoever.

 

 

Highlighted

Thanks, Lloyd. 

There is currently an issue that is causing a delay. We're working on fixing it.

Highlighted

This (ie reporting via the portal) really is a very unreliable part of O365.  It briefly started to work after a incident was raised earlier in the week, the incident was closed, and the data has not updated since.     Is anyone doing any RCA on this issue?

Highlighted

I'm having the same problem.  I need to monitor and report on weekend usage but can't figure out how to change it from UCT to AEST (link mentioned above no longer goes anywhere).