While searching DHCP logs there are huge latency (indextime -time) for few events

[pavanbmishra]

Hi SMEs, i have quick query here. While searching DHCP logs i could see huge latency (indextime -time) for few events , rest all looks ok. sharing two consecutive event logs with minimal and max latency reported. Any clue. Event collection is through UF here

[pavanbmishra]

Ok, and how that could be checked/confirmed? however these both logs from same host here.

[ITWhisperer]

One entry says date_zone 0 and the other says date_zone local - where do these come from? Presumably, this is something from the DHCP server itself. Do you have any documentation on the DHCP server logging process?

Alternatively, can you use this field to adjust your calculation of what the "latency" might be?

[ITWhisperer]

Could it be that one entry has a timestamp in local time (UTC-05:00 approx.) whereas the other is in 0 time?