**Reported in Launchpad by Matthew B last update 20-12-2016 06:03:23

The audit log currently produces time stamps like this: 2016-11-15T12:12:34 UTC

This is not a recognized standard for ISO8601. (https://en.wikipedia.org/wiki/ISO_8601#UTC)

– QUOTE
If the time is in UTC, add a Z directly after the time without a space. Z is the zone designator for the zero UTC offset. "09:30 UTC" is therefore represented as "09:30Z" or "0930Z". "14:45:15 UTC" would be "14:45:15Z" or "144515Z".
– END

Please consider the following patch to correct this:

diff --git a/audit_log.c b/audit_log.c
index 39078fa..4c3224d 100644
— a/audit_log.c
+++ b/audit_log.c
@@ -134,7 +134,7 @@ char *make_timestamp(char *buf, size_t buf_len, time_t t)
struct tm tm;

memset(&tm, 0, sizeof(tm));

• strftime(buf, buf_len, "%FT%T UTC", gmtime_r(&t, &tm));
  + strftime(buf, buf_len, "%FT%TZ", gmtime_r(&t, &tm));

return buf;
}