syslog-ng time is in UTC, not localtime
I get entries like:
Aug 28 23:00:01 turris /usr/sbin/cron[11765]: (root) CMD (/usr/bin/notifier)
when the time is actually 16:00:01.
The correct timezone is set in LuCI. The date command returns the correct value.
hwclock does as well. It seems syslog-ng does not use those sources for the time.
edit: Found the fix. hwclock --systz