I am trying to change the timezone on an on-premises SOAR so incident date/time stamps are in the customer's timezone (from Mountain to Eastern). I have run these console commands and even though the system shows a change in the local timezone SOAR continues to use the original timezone. Even a reboot did not fix.

How do you change the timezone that SOAR uses?

sudo timedatectl set-timezone America/New_York

timedatectl

sudo systemctl restart resilient-messaging.service

System continues to use Mountain time for incident creation, start date, etc.

Hi Ken,

Dates and times are stored as milliseconds past epoch in the SOAR database. The time zone of the server does not effect the times stored in the database.

It is the time zone of the browser/desktop that dictates the time presented by converting milliseconds past epoch to the time of your browser/desktop. Alternatively, you can set all times to be in UTC format by checking "Display date/time in UTC" -> https://www.ibm.com/docs/en/sqsp/51?topic=administrator-soar-platform-organization-settings

Try changing the time zone of your browser/desktop and then refresh the page. You will see the times change. Here are two screen shots that show me changing my desktop location from London to Washington. After refreshing the page the time in the incident changes.

I am trying to change the timezone on an on-premises SOAR so incident date/time stamps are in the customer's timezone (from Mountain to Eastern). I have run these console commands and even though the system shows a change in the local timezone SOAR continues to use the original timezone. Even a reboot did not fix.

How do you change the timezone that SOAR uses?

sudo timedatectl set-timezone America/New_York

timedatectl

sudo systemctl restart resilient-messaging.service

System continues to use Mountain time for incident creation, start date, etc.