This is a wierd one, but bear with me:
dav01 what timezone are you in?
xtreme-one, also the same question.
do you have the tzupdate patch installed on your servers? Is your bios clock set to UTC or local time?
I am trying to narrow down a question I am having in my own head about this issue, which I am also having (I posted about it in a separate thread, here:
openSuSE 10.2 logger )
I have already made the changes to my syslog-ng files as others have suggested and I STILL have the problem, but it occurs at a different time than everyone elses. You are the first also that I have heard that it doesnt happen at 2:15am.