...
VPN events between 12 and 1 PM UTC are not displayed
having VPN events between 12 PM and 1 PM UTC
increase the time window by 12 hours (the time of the event is still wrong, but it can be seen)
process_stdout.log file from the FMC is showing below syslog messages for VPN events, in which you can see that the message timestamp is wrong only between 12 pm UTC to 1 pm UTC: 2019-06-02 11:59:49 CSMEventServer[19960]: *** Got a message: --- 2019-06-02 11:59:49 CSMEventServer[19960]: {"device_uuid":"a069f006-399f-11e8-9a37-9b1db0913a88","syslog_time":1559476788,"syslog_msg_class":"vpn","syslog_severity":5,"syslog_msg_id":713041,"syslog_msg_text":" IP = 194.204.42.221, IKE Initiator: New Phase 1, Intf inside, IKE Peer 194.204.42.221 local Proxy Address 0.0.0.0, remote Proxy Address 10.174.96.0, Crypto map (CSM_outside_map)"}. //Time stamp conversion 11:59:48 2019-06-02 12:00:02 CSMEventServer[19960]: *** Got a message: ---- 2019-06-02 12:00:02 CSMEventServer[19960]: {"device_uuid":"a069f006-399f-11e8-9a37-9b1db0913a88","syslog_time":1559433601,"syslog_msg_class":"vpn","syslog_severity":4,"syslog_msg_id":752012,"syslog_msg_text":" IKEv1 was unsuccessful at setting up a tunnel. Map Tag = CSM_outside_map. Map Sequence Number = 5."} //Time stamp conversion 00:00:01 ........ 2019-06-02 12:59:52 CSMEventServer[19960]: *** Got a message: --- 2019-06-02 12:59:52 CSMEventServer[19960]: {"device_uuid":"a069f006-399f-11e8-9a37-9b1db0913a88","syslog_time":1559437191,"syslog_msg_class":"vpn","syslog_severity":5,"syslog_msg_id":713041,"syslog_msg_text":" IP = 194.204.42.221, IKE Initiator: New Phase 1, Intf inside, IKE Peer 194.204.42.221 local Proxy Address 0.0.0.0, remote Proxy Address 10.174.96.0, Crypto map (CSM_outside_map)"} //Time stamp conversion 00:59:51 2019-06-02 13:00:02 CSMEventServer[19960]: 2019-06-02 13:00:02 CSMEventServer[19960]: *** Got a message: --- 2019-06-02 13:00:02 CSMEventServer[19960]: {"device_uuid":"a069f006-399f-11e8-9a37-9b1db0913a88","syslog_time":1559480401,"syslog_msg_class":"vpn","syslog_severity":4,"syslog_msg_id":752012,"syslog_msg_text":" IKEv1 was unsuccessful at setting up a tunnel. Map Tag = CSM_outside_map. Map Sequence Number = 5."} //Time stamp conversion 13:00:01 The update from Gargi Pandey (garpande) on the dev assist was: "we found the root cause of the issue. Please log a bug. We will provide the fix in next possible MR"