# Graylog only show logs on current UTC time **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [February 22, 2022, 5:17am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739 "2022-02-22T05:17:19Z")\ **Posts on this page:** 17\ **Page:** 1
**Author:** ![glennfernandez83](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/glennfernandez83/32/11029_2.png) [@glennfernandez83](https://community.graylog.org/u/glennfernandez83)\ **Post date:** [February 22, 2022, 5:17am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/1 "2022-02-22T05:17:19Z")
I have a graylog server that is running fine for years until we have to shut it down and move to a different subnet. my root timezone is in UTC and my server time is in +8. my problem is I cannot see the latest log entry and only shows the log based on the current UTC time. I am using graylog 2.4.6 running on docker. my current time is 13:16 Manila time. latest entry in the screenshot is 8 hours behind. ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/5/58d57855334aa580c1cd65a4f1ba4ef87e74384f.png) ---
**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\ **Post date:** [February 22, 2022, 10:16pm UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/2 "2022-02-22T22:16:33Z")
Hello && Welcome Couple things you can check for troubleshooting. Navigate _System/Overview_ make sure the Date/Time is correct under _Time configuration_. All three should match your +8 time zone. Check your Graylog server for date/time insure your using the correct TimeZone. If NTP was installed check the status. EDIT: I forgot to ask, does your _users_ have a setting to adjust there personal time zones in Graylog 2.4? The reason I ask, it is convenient with the newer versions of Graylog as shown below: ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/9/9c569b56bd31ceb48e552dcef5dc2aa94924a953.png) ---
**Author:** ![glennfernandez83](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/glennfernandez83/32/11029_2.png) [@glennfernandez83](https://community.graylog.org/u/glennfernandez83)\ **Post date:** [February 23, 2022, 1:29am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/3 "2022-02-23T01:29:44Z")
graylog server is in UTC ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/6/6a8a4cb9a04d67a41272b9bc02570d5f60b45c4e.png) yes, users have access to change their preferred time. ---
**Author:** ![glennfernandez83](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/glennfernandez83/32/11029_2.png) [@glennfernandez83](https://community.graylog.org/u/glennfernandez83)\ **Post date:** [February 23, 2022, 1:30am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/4 "2022-02-23T01:30:36Z")
My server time is +8 and I put Asia/Manila in graylog config root\_timezone but the graylog server time is still in UTC. ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/0/0ccdbcb2ea5a45f51f683f9f968175fa58d3e657.png) ---
**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\ **Post date:** [February 23, 2022, 1:59am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/5 "2022-02-23T01:59:38Z")
🤔 That’s peculiar… When you made the configuration to graylog.config did you execute a service restart. My apologies I’m not very good with Docker. Graylog has a default user called Admin, is this still accessible to you? or was this changed? If it wasn’t change can you logon with "Admin and recheck the timestamp issue? For user admin, it uses _timezone_ defined in _/etc/graylog/server/server.conf_ file, parameter root\_timezone. The reason for this is I’m wondering if only a user created has issues or its global issue. I have also found this, another community member had a similar issue like your yours > [@Timestamp 1 Hour Off](https://community.graylog.org/t/timestamp-1-hour-off/19148/8): > > @dickinsonzach Yes, you are correct, by chance did you restart your graylog service when you modified you server configuration file? Mine is America/Chicago [image] I had to install ntp service on my graylog server while back. And this I noticed was someone with Docker. Specailly this part ```auto sudo docker-compose down update your graylog.env with, for example America/New_York TZ=Etc/GMT+8 <--I added this part for you. ``` > > > This is what I have on System\>Overview; > User 2020-05-07 …18:47:00 -4:00 > Your web browser 2020-05-07 18:47:00 -4:00 > Graylog server 2020-05-07 22:48:00 +0:00 > > That is an issue with the logs. I can only see the last 8 hours of data on Grafana. > > I have changed the timezone on the server without luck. > garylog.env is GRAYLOG\_TIMEZONE=America/Puerto\_Rico > > Any ideas? > > Thanks! ---
**Author:** ![glennfernandez83](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/glennfernandez83/32/11029_2.png) [@glennfernandez83](https://community.graylog.org/u/glennfernandez83)\ **Post date:** [February 23, 2022, 3:18am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/6 "2022-02-23T03:18:41Z")
yes, I restarted the docker container. I cannot execute docker-compose down because that will delete all data that we have. I can’t log in to the default admin account ---
**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\ **Post date:** [February 23, 2022, 3:22am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/7 "2022-02-23T03:22:24Z")
I understand, I did some more research and from what I understand is its the GL server/Docker but if you got a chance to read that last post it has another ideas for you to be able to try. One being the type of Time Zone needed. I also found issues on GitHub about the Docker version you have. Sorry I can be more help EDIT: Can you add your local files (/etc/timezone and /etc/localtime) as volume in your docker-container. Update your docker-compose.yml with the following lines. volumes: - “/etc/timezone:/etc/timezone:ro” - “/etc/localtime:/etc/localtime:ro” So the container time is the same as on your host? ---
**Author:** ![glennfernandez83](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/glennfernandez83/32/11029_2.png) [@glennfernandez83](https://community.graylog.org/u/glennfernandez83)\ **Post date:** [February 23, 2022, 3:39am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/8 "2022-02-23T03:39:31Z")
I was able to ask my colleague. the admin time configuration shows graylog server is also in UTC ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/6/6a434cb554fdd73e6722a6753193a61edbc4a662.png) ---
**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\ **Post date:** [February 23, 2022, 3:41am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/9 "2022-02-23T03:41:33Z")
So it is your Docker container that holds Graylog. I cant think of anything else. ---
**Author:** ![glennfernandez83](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/glennfernandez83/32/11029_2.png) [@glennfernandez83](https://community.graylog.org/u/glennfernandez83)\ **Post date:** [February 23, 2022, 3:50am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/10 "2022-02-23T03:50:32Z")
I updated the docker compose as ssuggested, not the time are all +8 but the data is still 8 hours late. ---
**Author:** ![glennfernandez83](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/glennfernandez83/32/11029_2.png) [@glennfernandez83](https://community.graylog.org/u/glennfernandez83)\ **Post date:** [February 23, 2022, 3:52am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/11 "2022-02-23T03:52:52Z")
sorry. that seem to fix the issue. it was the old data in the future time are still showing. but when I tried to access our sites and check the logs, the time are correct. Thank you. ---
**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\ **Post date:** [February 23, 2022, 3:57am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/12 "2022-02-23T03:57:21Z")
> [@glennfernandez83](#): > > not the time are all +8 but the data is still 8 hours late. Could you explain Not All but data is till 8 hours late? Kind of confusing but if its not working as expected, I’m not sure. Did you check the Date/Time inside your Docker container? Just to clarify, when you see the timezone incorrect from the Graylog Server Time configuration section this would be Graylog is picking up that date/time/zone. Since your using Docker I would assume its from your container date/time. ---
**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\ **Post date:** [February 23, 2022, 3:57am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/13 "2022-02-23T03:57:44Z")
On then dont mind my last post 😆 ---
**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\ **Post date:** [February 23, 2022, 3:58am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/14 "2022-02-23T03:58:41Z")
AWSOME!!! And i dont know anything about Docker HAHA, Get a chance mark this as solved, Glad I could help 😃 I shouldn’t say anything 🙂 ---
**Author:** ![glennfernandez83](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/glennfernandez83/32/11029_2.png) [@glennfernandez83](https://community.graylog.org/u/glennfernandez83)\ **Post date:** [February 23, 2022, 4:15am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/15 "2022-02-23T04:15:15Z")
yes, thanks a lot. I just need to wait 8 hours so i can already have clean data on my logs ---
**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\ **Post date:** [February 23, 2022, 4:16am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/16 "2022-02-23T04:16:06Z")
Nice, I’ve been wanting to learn more about Docker and this gave me the opportunity to do so. Thank you for letting me help you. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [March 9, 2022, 4:16am UTC](https://community.graylog.org/t/graylog-only-show-logs-on-current-utc-time/22739/17 "2022-03-09T04:16:40Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.