I have installed graylog version 2.1.0-beta. Collecting nginx error and access logs in UTC+8. But stream alert triggers in UTC which means after 8 hours. How can I alert stream correct? Is there any other method that change timezone received logs.
you should not install this ancient version of Graylog. Current stable release is 3.0. Your selected release is from August 2016. No security updates or bugfixes for your version.
Graylog will work with the ingested messages as they are UTC if no timezone is give, what is the point in this.