We've got our vWLAN logging to Splunk, however the time stamps are all off 4 hours. It appears that even though we're set for NTP, the syslog facility is not using the local time in the timestamp. This is causing some confusion when looking at the logs in Splunk. When logged into the web interface on the vWLAN, the time appears correct in the upper right hand corner of the display.
Under AP Templates, so you can different APs in different time zones.
That is correctly set already.