If the time is in UTC, add a Z directly after the time without a space. Z is the zone designator for the zero UTC offset. "09:30 UTC" is therefore represented as "09:30Z" or "0930Z". "14:45:15 UTC" would be "14:45:15Z" or "144515Z".
Please consider the following patch to correct this:
The audit log currently produces time stamps like this:
2016-11-15T12:12:34 UTC
This is not a recognized standard for ISO8601.
Please consider the following patch to correct this: