How to change the Timestamp of Graylog which is Deployed with Docker Compose?

Graylog Central (peer support)
,
1

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!

1. Different time stamps in the graylogUI:

Time configuration - view in Browser

User admin:2022-07-07 10:37:05 +00:00
Your web browser:2022-07-07 16:07:05 +05:30
Graylog server:2022-07-07 10:37:05 +00:00

2. My environment:

  • OS Information:
    Host: Ubuntu 22.4
    deployed using docker-compose

  • Package Version:
    graylog:4.2

  • Service logs, configurations, and environment variables:

    graylog:
    image: graylog/graylog:4.2
    volumes:
    - graylog_data:/usr/share/graylog/data # Persisted Graylog data
    environment:
    - TZ=Asia/Kolkata
    - GRAYLOG_PASSWORD_SECRET=xxxxx
    - GRAYLOG_TIMEZONE=Asia/Kolkata

3. What steps I have already taken to try and solve the problem?
I was deployed with the different TimeZone initially
then Changed the Time in the Host Server, Docker Containers(graylog, Es, and MongoDB)
restarted the containers.

4. How can the community help?

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

2

Hello,

Date/Time checks:

Container:

  • TZ=America/Chicago
  • GRAYLOG_ROOT_TIMEZONE=America/Chicago

Graylog Server

root@graylog# date 
Thu 07 Jul 2022 04:15:43 PM CDT

(i.e. if that date/time different try using using ntp)

Web UI user.

image
image943×543 26.8 KB

1 Like
3

Hi gsmith,

Thanks for your time, this helped.
changed the GRAYLOG_TIMEZONE=Asia/Kolkata to GRAYLOG_ROOT_TIMEZONE=Asia/Kolkata
the dates were updated in the UI.

But, The Event Timestamp and message timestamps are still different.
all the times are same when I check in the server, Graylog container, MongoDB, Es, and Client system.
Could you help me with the same as well? attached the image for your reference.

image
image1197×445 35 KB

4

Hello,

The message timestamp is from the client ( remote) device perhaps, So I would look there to insure the correct date/time.

If that is incorrect try logging out and back in with that user and/or restarting Graylog service.

5

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.