Commander Commander
Commander
648 views

Device Receipt Time from [hostname| IP |Kaspersky|Kaspersky Endpoint Security for Windows] may be incorrect - Device Receipt Time is smaller than Agent Receipt Time (Events are in the past)

ESM is alerting "Device Receipt Time from [hostname| IP |Kaspersky|Kaspersky Endpoint Security for Windows] may be incorrect - Device Receipt Time is smaller than Agent Receipt Time (Events are in the past)". So checked  system time and agent.log time but these times different. How change smart connector's time?

Labels (2)
0 Likes
1 Reply
Fleet Admiral
Fleet Admiral

All of this can be configured, managed and corrected as needed. Go to the connector configuration (depends on what you have setup - either ESM / Express or go to ArcMC / Connector Appliance) and go to the specific connector that is in use here. You will find a bunch of options to set the timezone (likely to be the issue here if its out by an hour) or actually correct the time.

On the connector itself - follow the steps to do this by running the local command line to access the settings -

Example of settings you will find via ESM / Express:

timecorrect.jpg

Same set of options are available via ArcMC and Connector appliance - just go to the settings for the relevant connector and adjust from there. Its all drop down boxes or set through the GUI.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.