Kiwi Syslog Server NG 1.4.1.1: Log rotation does not align with local time

In KSS NG 1.4.1.1, age-based log rotation is evaluated using UTC. In time zones that differ from UTC, a one-day rotation may not occur at local midnight, and monthly retention requirements may not align with the built-in rotation behavior.

KSS NG 1.4.1.1 does not provide a local-time option for age-based log rotation. The rotation boundary is therefore based on UTC rather than the server’s local time.

Use the workaround that matches the required result.

For scheduled archiving and retention

1. Go to Setup > Schedules.

2. Click Add scheduled task.

3. Select Archive and configure the required schedule.

4. Specify the source folder containing the log files. The default location is:

   C:\ProgramData\SolarWinds\KiwiSyslogService\logs

5. Set the file-age criteria.

6. Specify the destination folder and select whether to move or copy the files.

7. Enable ZIP compression if required, then create the schedule.

8. Create a separate Clean-up task to remove archived files after the required retention period.

For date-based log file names

Configure a date-based AutoSplit variable in the log-file name. This creates separate files based on the date value, but KSS NG 1.4.1.1 uses UTC for the time-related AutoSplit values.

For an exact local-time rollover

Use an external scheduler to manage the archive or copy operation at the required local time. The built-in age-based rotation in KSS NG 1.4.1.1 cannot be configured to use local time.

Additional Notes

• KSS NG 1.5 introduces Use local time instead of UTC time for auto-split variables under Settings > Formatting > Log to file settings. This setting controls time-related AutoSplit values used in file naming. It should not be treated as a change to the age-based rotation boundary. 
• The KSS NG documentation supports using scheduled Archive and Clean-up tasks to automate log archival and retention.