I just install this plugin in graylog marketplace:
Seen like graylog receive logs, but I click “Show Received messages”, it said “nothing found”, please advise me how to fix it.
August 3, 2017, 12:00pm
Have you configured your Dell SonicWall Firewall accordingly?
Also try using an “Absolute Search” in Graylog and setting the end date some hours into the future to rule out problems with timestamps/timezones.
Strange, now I see it. I let default search in last 8 hours, totaly same what i did yesterday. I thinks it would be ok right now.
August 4, 2017, 6:40am
This means that the timestamps of your messages have the wrong timezone.
You can use the
parse_date() function or a Copy Input extractor with a Date converter to change it to the correct timezone.
where can I put parse_date() function into. I just figure out that it get incorrect time
. in my picuture I search log in 15PM, but the latest message just 13PM.
August 4, 2017, 8:29am
is a processing pipeline function:
Seen like my graylog server get log slow, it alway get logs 2 hours ago, does it related this function?
August 4, 2017, 9:00am
It’s not slow, it’s simply the timestamps/timezones of the messages.
Thanks Jochen, I tried with Copy Input extractor, but not success, i will create another thread about this issue.
August 21, 2017, 3:31am
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.