Graylog shows log after 9 hour with wrong timestamp

Hi.
I’m trying to use Graylog on my company.

but it has timestamp issue.

Every device and Graylog server has been configured ntp with timezone (Asia/Seoul, UTC +9)

- Remote Device(Cisco Switch)
Apr 21 09:10:31.636: %LINK-3-UPDOWN: Interface GigabitEthernet2/0/21, changed state to up

- In Graylog Server
facility
local7
facility_num
23
level
3
message
%LINK-3-UPDOWN: Interface GigabitEthernet2/0/21, changed state to up
sequence_number
199510
source

timestamp
2021-04-21 18:10:31.636 +09:00

- Graylog Time Configuration
User :
2021-04-21 18:20:50 +09:00
Your web browser:
2021-04-21 18:20:50 +09:00
Graylog server:
2021-04-21 09:20:50 +00:00

How can I fix it?

Please help my project :sob:

Change timezone also for graylog box (linux). Use command timedactl to setup correct timezone:
sudo timedatectl set-timezone Asia/Seoul and restart server.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.