<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Sep 6, 2017, at 2:22 PM, Cantor, Scott <<a href="mailto:cantor.2@osu.edu" class="">cantor.2@osu.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><blockquote type="cite" style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br class="Apple-interchange-newline">Isn't the %T in the audit.xml formatting string controlling that first timestamp? Isn't that the IdP itself?<br class=""></blockquote><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">You're right, and it's a bug. It's handled separately from all the field population logic and it isn't routed through the date logic the other fields are.</span><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""></div></blockquote><br class=""></div><div>And I'll confirm that a workaround for that today is to:</div><div><br class=""></div><div><ul type="disc" style="padding: 0px 0px 0px 15px; margin: -8px 0px 15px 15px; list-style-position: initial; list-style-image: initial; border: 0px; outline: 0px; vertical-align: baseline; color: rgb(85, 85, 85); font-family: proxima-nova-zendesk, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen-Sans, Ubuntu, Cantarell, 'Helvetica Neue', Arial, sans-serif;" class=""><li type="disc" style="line-height: 20px; margin: 10px 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline;" class="">modify the IdP's conf/audit.xml file to remove the '%T' from the beginning of the pattern, so that that form of the timestamp is <em style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline;" class="">not</em> included in the log line</li><li type="disc" style="line-height: 20px; margin: 10px 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline;" class="">and then add a timestamp to the front of that message in the IdP's conf/logback.xml file, where you can control the timezone. </li></ul><p dir="auto" style="margin: 0px 0px 16px; font-family: proxima-nova-zendesk, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen-Sans, Ubuntu, Cantarell, 'Helvetica Neue', Arial, sans-serif; line-height: 20px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; color: rgb(85, 85, 85);" class="">So this line in audit.xml:<br class=""><entry key="Shibboleth-Audit" value="%T|%b|%I|%SP|%P|%IDP|%bb|%III|%u|%ac|%attr|%n|%i|" /><br class="">becomes:<br class=""><entry key="Shibboleth-Audit" value="|%b|%I|%SP|%P|%IDP|%bb|%III|%u|%ac|%attr|%n|%i|" /></p><p dir="auto" style="margin: 0px 0px 16px; font-family: proxima-nova-zendesk, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen-Sans, Ubuntu, Cantarell, 'Helvetica Neue', Arial, sans-serif; line-height: 20px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; color: rgb(85, 85, 85);" class="">and then, in the section of logback.xml that starts with this:</p><pre style="padding: 6px 10px; font-family: Consolas, 'Liberation Mono', Menlo, 'Bitstream Vera Sans Mono', Courier, monospace; font-size: 12.025px; color: rgb(51, 51, 51); border-top-left-radius: 3px; border-top-right-radius: 3px; border-bottom-right-radius: 3px; border-bottom-left-radius: 3px; margin-top: 15px; margin-bottom: 15px; line-height: 19px; word-break: break-all; word-wrap: break-word; white-space: pre-line; background-color: rgb(248, 248, 248); border: 1px solid rgb(204, 204, 204); outline: 0px; vertical-align: baseline;" class=""><code style="padding: 0px; font-family: Consolas, 'Liberation Mono', Menlo, 'Bitstream Vera Sans Mono', Courier, monospace; font-size: 12px; color: inherit; border-top-left-radius: 3px; border-top-right-radius: 3px; border-bottom-right-radius: 3px; border-bottom-left-radius: 3px; border: 0px; margin: 0px; outline: 0px; vertical-align: baseline; background-image: none; white-space: pre-wrap; word-break: break-word; background-position: initial initial; background-repeat: initial initial;" class=""><!-- Audit log. -->
<appender name="IDP_AUDIT" class="ch.qos.logback.core.rolling.RollingFileAppender">
</code></pre><p dir="auto" style="margin: 0px 0px 16px; font-family: proxima-nova-zendesk, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen-Sans, Ubuntu, Cantarell, 'Helvetica Neue', Arial, sans-serif; line-height: 20px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; color: rgb(85, 85, 85);" class="">you change this following line:</p><pre style="padding: 6px 10px; font-family: Consolas, 'Liberation Mono', Menlo, 'Bitstream Vera Sans Mono', Courier, monospace; font-size: 12.025px; color: rgb(51, 51, 51); border-top-left-radius: 3px; border-top-right-radius: 3px; border-bottom-right-radius: 3px; border-bottom-left-radius: 3px; margin-top: 15px; margin-bottom: 15px; line-height: 19px; word-break: break-all; word-wrap: break-word; white-space: pre-line; background-color: rgb(248, 248, 248); border: 1px solid rgb(204, 204, 204); outline: 0px; vertical-align: baseline;" class=""><code style="padding: 0px; font-family: Consolas, 'Liberation Mono', Menlo, 'Bitstream Vera Sans Mono', Courier, monospace; font-size: 12px; color: inherit; border-top-left-radius: 3px; border-top-right-radius: 3px; border-bottom-right-radius: 3px; border-bottom-left-radius: 3px; border: 0px; margin: 0px; outline: 0px; vertical-align: baseline; background-image: none; white-space: pre-wrap; word-break: break-word; background-position: initial initial; background-repeat: initial initial;" class=""> <Pattern>%msg%n</Pattern>
</code></pre><p dir="auto" style="margin: 0px 0px 16px; font-family: proxima-nova-zendesk, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen-Sans, Ubuntu, Cantarell, 'Helvetica Neue', Arial, sans-serif; line-height: 20px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; color: rgb(85, 85, 85);" class="">to be something like:</p><pre style="padding: 6px 10px; font-family: Consolas, 'Liberation Mono', Menlo, 'Bitstream Vera Sans Mono', Courier, monospace; font-size: 12.025px; color: rgb(51, 51, 51); border-top-left-radius: 3px; border-top-right-radius: 3px; border-bottom-right-radius: 3px; border-bottom-left-radius: 3px; margin-top: 15px; margin-bottom: 15px; line-height: 19px; word-break: break-all; word-wrap: break-word; white-space: pre-line; background-color: rgb(248, 248, 248); border: 1px solid rgb(204, 204, 204); outline: 0px; vertical-align: baseline;" class=""><code style="padding: 0px; font-family: Consolas, 'Liberation Mono', Menlo, 'Bitstream Vera Sans Mono', Courier, monospace; font-size: 12px; color: inherit; border-top-left-radius: 3px; border-top-right-radius: 3px; border-bottom-right-radius: 3px; border-bottom-left-radius: 3px; border: 0px; margin: 0px; outline: 0px; vertical-align: baseline; background-image: none; white-space: pre-wrap; word-break: break-word; background-position: initial initial; background-repeat: initial initial;" class=""> <Pattern>%date{"yyyy-MM-dd'T'HH:mm:ss,SSSZZ", America/Los_Angeles}%msg%n</Pattern>
</code></pre><p dir="auto" style="margin: 0px 0px 16px; font-family: proxima-nova-zendesk, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen-Sans, Ubuntu, Cantarell, 'Helvetica Neue', Arial, sans-serif; line-height: 20px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; color: rgb(85, 85, 85);" class="">Of course, you can vary what is in that timestamp, whether you want micoseconds or not, etc.</p></div><br class=""><div class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">--<br class="">Michael A. Grady<br class="">IAM Architect, Unicon, Inc.</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""></body></html>