auth.log timestamp

[1gatomontes]

Ubuntu 16.04.
I've changed the settings to reflect my timezone.
I've setup the ntp service.
When I do the date command, I get the right date, time, and timezone.
Nevertheless, my auth.log file keeps timestamping events 4 hours in the future.
Any thoughts?
Thanks

[TheFu]

Welcome to the forums.
sudo dpkg-reconfigure tzdata
might help. The time displayed has 2 aspects. The console and the GUI. Internally, it is all UTC. It is just the display format that determines what humans see.