All our machines are UTC but we should try to match the format used elsewhere. syslog seems to use ISO8601