Hello Team,
We would like to submit an enhancement request regarding Incident Report exports.
Currently, the report header fields such as Start Date and End Date correctly reflect our configured tenant timezone (Asia/Ulaanbaatar). However, the Date/Time and Last Status Update fields within the exported report continue to display timestamps in UTC.
Based on the support team's investigation, this behavior is a product limitation and cannot be modified through configuration changes.
Our SOC team relies heavily on exported incident reports for security investigations, auditing, and compliance activities. The use of UTC timestamps in exported reports requires manual time conversion and creates operational challenges.
In addition, this issue has been identified as a PCI DSS finding in our environment. To meet compliance and operational requirements, we need all timestamps within exported incident reports, including Date/Time and Last Status Update, to be displayed in our configured tenant timezone (Asia/Ulaanbaatar).
We kindly request that this be reviewed as a product enhancement by the Product Engineering team.
Please let us know if an enhancement request already exists, or if one can be created and considered for a future release.
Thank you.
Best Regards,
Batbilguun B.
