🛠️ UniFi Network Application 9.4.17: CEF Syslog Timestamp Fixes
TL;DR: UniFi Network Application 9.4.17 brings two welcome changes for CEF events in syslog: their syslog timestamp now follows the local time zone (matching other UniFi events), and a new field UNIFIutcTime provides a proper UTC timestamp with time zone information. UniFi Network Application 9.4.17 is now a release candidate . As usual, the release notes don't say much about syslog activity logging, but there are some very welcome improvements. In my earlier post, 🕰️ Inconsistent Time Zones in UniFi Logs , I showed that most UniFi events used the local time zone while CEF events used UTC . That mismatch could break event correlation in log management systems and SIEMs—if you weren't aware of it and didn't handle the difference. What has changed in 9.4.17 (for CEF events) Syslog timestamps now align with local time. CEF events' syslog timestamp uses the local time zone , matching other UniFi event types. This is good news for consistency,...