I’m having a hardtime figuring this out. My fortigate is sending to my graylog, which goes fine. Even tried to work with pipelines and set epoch timestamp to timestamp but those date/times are the same. The fortigate already logs in my timezone, so when i try to search stuff, it’s always an hour beh…

FortiGate and timezone settings

Tuumke (Tuumke) March 10, 2021, 7:40am 2

Figured it out. In the syslog message from the fortgate there is a TZ field which is set to +0100. I guess graylog doesn’t automaticly recognize it. So i did the pipeline suggestion in here.

All works out now.

Topic		Replies	Views
Fortinet / Fortigate syslog time Graylog Central (peer support)	3	3944	July 7, 2021
Timestamp Issue - Different Timestamps Graylog Central (peer support)	3	2775	December 29, 2018
Fortinet, syslog timestamp timezone set wrong Graylog Central (peer support)	6	4926	January 17, 2018
Still having timestamp issues Graylog Central (peer support) pipeline-rules	4	2800	July 18, 2019
I get a log For Device system Alerts received message but No results on search page Help Me Graylog Central (peer support) pipeline-rules	7	1376	July 27, 2020

FortiGate and timezone settings

Related topics