場景：當我們修改完系統時間的時區后，我們去查看我們的系統日志的時間發現時區還是在之前的系統時間時區。
[root@vp-n ~]# ls -l /etc/localtime
lrwxrwxrwx 1 root root 33 May 22 11:59 /etc/localtime -> /usr/share/zoneinfo/Asia/Shanghai
[root@vp-n ~]# date Tue May 22 14:16:27 CST 2018 [root@vp-n ~]# tail -f /var/log/secure May 22 04:55:33 vp-n sshd[10462]: Received disconnect from 221.194.47.239 port 51137:11: [preauth] May 22 04:55:33 vp-n sshd[10462]: Disconnected from 221.194.47.239 port 51137 [preauth] May 22 05:34:37 vp-n sshd[10519]: Received disconnect from 122.226.181.164 port 51822:11: [preauth] May 22 05:34:37 vp-n sshd[10519]: Disconnected from 122.226.181.164 port 51822 [preauth] May 22 05:35:46 vp-n sshd[10524]: Received disconnect from 221.194.47.243 port 44655:11: [preauth] May 22 05:35:46 vp-n sshd[10524]: Disconnected from 221.194.47.243 port 44655 [preauth] May 22 05:41:51 vp-n sshd[10529]: Received disconnect from 115.238.245.8 port 58759:11: [preauth] May 22 05:41:51 vp-n sshd[10529]: Disconnected from 115.238.245.8 port 58759 [preauth] May 22 05:59:00 vp-n sshd[10540]: Received disconnect from 221.194.47.221 port 55043:11: [preauth] May 22 05:59:00 vp-n sshd[10540]: Disconnected from 221.194.47.221 port 55043 [preauth]
你可以看到上方我的系統時間是下午的時間（也就是北京時間），但是我看日志的記錄時間還是以之前的時區進行記錄日志，這會導致我們以后對一些故障的時間判斷造成影響。
解決方法：我們需要重啟一下我們的系統日志服務(rsyslog)，（你也可以重啟系統，但是你懂的）
systemctl restart rsyslog
之后這個問題就可以解決了。日志就恢復正常了。
[root@vp-n ~]# tail -1 /var/log/secure May 22 14:24:35 vp-n polkitd[441]: Unregistered Authentication Agent for unix-process:10575:113412152 (system bus name :1.713, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) (disconnected from bus) [root@vp-n ~]# date Tue May 22 14:26:38 CST 2018
在此做個記錄，便於以后查詢。