1. The first issue is related to the incorrect time being recognized in the logs. Although recorded events and live feeds show the correct time in the event list and on the event recording overlay, the time shown in the log section is off by 4 hours. I am located in the same timezone as New York. My timezone is and has been set correctly in FreeNAS and on my networking gear. I am thinking that this could be an issue with UTC being set somewhere, but I cannot find anywhere to change the timezone. I am not sure but maybe the MySQL instance has the wrong timezone set? Any thoughts on this?
- Capture.PNG (492.23 KiB) Viewed 19736 times
2. The second issue is related to events not being deleted by filters. I have tried using the built in Purge filter as well as creating my own filters to automatically delete events, but cannot get the events to delete. I know that my filters are set correctly and saved as they do show the correct results when using the "Execute" command or the "List Matches" button. I am not sure if this could be a permission issue or something else. The only other thing is that I am storing events to a different location on the FreeNAS server than in the default location. The added folder is named "ZM-Storage" and should have sufficient permissions for deleting as events are being saved there without issue. I have also tried enabling "OPT_FAST_DELETE" to see if the events would at least be removed from ZM and the database, but this did not work. I am really thinking that this may be a MySQL or database issue. Any thoughts would be greatly appreciated.
I am happy to provide log files, just let me know what logs files I need to export.