Ok, I understand the behavior now. This is the very start of a log file. So, if I understand correctly, the DWC login occurred at 00:00:19 after power up, the clock was set and time stamps used after that.
power up + 00:00:15 [info] Event logging started at level warn
power up + 00:00:15 [info] Running: Duet Ethernet 1.02 or later: 3.2 (2021-01-05)
power up + 00:00:17 [warn] Network running, IP address = X.X.X.X
power up + 00:00:19 [warn] HTTP client Z.Z.Z.Z login succeeded
2021-02-26 18:43:10 [warn] Date and time set at
power up + 00:00:19
2021-02-26 18:43:11 [warn] HTTP client Z.Z.Z.Z login succeeded