diff --git a/package/etc/conf.d/log_paths/lp-fortinet_fortiweb.conf.tmpl b/package/etc/conf.d/log_paths/lp-fortinet_fortiweb.conf.tmpl
index 564f4d9..4b146f1 100644
--- a/package/etc/conf.d/log_paths/lp-fortinet_fortiweb.conf.tmpl
+++ b/package/etc/conf.d/log_paths/lp-fortinet_fortiweb.conf.tmpl
@@ -26,11 +26,10 @@ log {
     };
 
 # Fetch timezone from timezone nv pair and parse unique format (no zero padding, e.g. "-8:00" rather than "-08:00"
-# Reformat to "-0800"
+# Reformat to "-08:00"
     rewrite {
         subst('.*([\+-]\d+:\d+).*', $1, value(".kv.timezone"));
-        subst('([\+-])(\d)(?=:):(\d+)', "${1}0${2}${3}", value(".kv.timezone"));
-        subst('([\+-])(\d+):(\d+)', "$1$2$3", value(".kv.timezone"));
+        subst('([\+-])(\d)(?=:)(:\d+)', "${1}0${2}${3}", value(".kv.timezone"));
     };
 
     #2020-02-12,23:13:33-0800