Export via REST API only shows UTC timestamps

Graylog Central (peer support)
1

Hi,
I try to use the REST API to export my logs in csv format. Saidly the timestamps in the csv file are in UTC format. I already changed the root timezone to Europe/Berlin and when i export my logs via the graylog webbrowser the correct timezone is exported, looking like this: 2024-05-24T14:51:01.938+02:00

When i export logs via REST (/api/search/universal/relative/export?query=*&offset=0&range=300&fields=timestamp,message,application_name,level) it shows my timestamp in UTC format like this: 2024-05-24T12:52:00.325Z

Can i change the timezone and the format that is showing in the csv?

Graylog Timeconfiguration shows this
grafik

Graylog Version: Graylog 5.2.1

edit: updated graylog server timezone, but nothing changed so far.
Also found this github issue but i dont understand why time_zone is only available in views/search/messages

2

GL stores messages in UTC, so it’s somewhat consistent that messages saved as CSV are also UTC.
There just hasn’t been a lot of demand to perform time-zone conversion.
You can certainly file a feature request and it will be considered for the future.

3

switched the REST call to export the csv now to api/views/search/messages where you can add a timezone and it works so far

1 Like
4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.