# How to use Dell SonicWall Firewall?

**URL:** <https://community.graylog.org/t/how-to-use-dell-sonicwall-firewall/1950>\
**Category:** Graylog Add-ons\
**Created:** [August 3, 2017, 11:43am UTC](https://community.graylog.org/t/how-to-use-dell-sonicwall-firewall/1950 "2017-08-03T11:43:40Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![tiendungitd](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tiendungitd/32/622_2.png) [@tiendungitd](https://community.graylog.org/u/tiendungitd)\
**Post date:** [August 3, 2017, 11:43am UTC](https://community.graylog.org/t/how-to-use-dell-sonicwall-firewall/1950/1 "2017-08-03T11:43:40Z")

</div>

I just install this plugin in graylog marketplace: [https://marketplace.graylog.org/addons/499f432f-bca2-4bfe-b973-fd027fba787a](https://marketplace.graylog.org/addons/499f432f-bca2-4bfe-b973-fd027fba787a),

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/1X/87db22329436c7fbe015735a3a6c71ca06c265ca.png)  
Seen like graylog receive logs, but I click “Show Received messages”, it said “nothing found”, please advise me how to fix it.  
Thanks.

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [August 3, 2017, 12:00pm UTC](https://community.graylog.org/t/how-to-use-dell-sonicwall-firewall/1950/2 "2017-08-03T12:00:30Z")

</div>

Have you configured your Dell SonicWall Firewall accordingly?  
Also try using an “Absolute Search” in Graylog and setting the end date some hours into the future to rule out problems with timestamps/timezones.

---

<div class="post-metadata">

**Author:** ![tiendungitd](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tiendungitd/32/622_2.png) [@tiendungitd](https://community.graylog.org/u/tiendungitd)\
**Post date:** [August 4, 2017, 2:26am UTC](https://community.graylog.org/t/how-to-use-dell-sonicwall-firewall/1950/3 "2017-08-04T02:26:09Z")

</div>

Hi Jochen,  
Strange, now I see it. I let default search in last 8 hours, totaly same what i did yesterday. I thinks it would be ok right now.  
Thanks.

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [August 4, 2017, 6:40am UTC](https://community.graylog.org/t/how-to-use-dell-sonicwall-firewall/1950/4 "2017-08-04T06:40:32Z")

</div>

This means that the timestamps of your messages have the wrong timezone.

You can use the `parse_date()` function or a Copy Input extractor with a Date converter to change it to the correct timezone.

---

<div class="post-metadata">

**Author:** ![tiendungitd](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tiendungitd/32/622_2.png) [@tiendungitd](https://community.graylog.org/u/tiendungitd)\
**Post date:** [August 4, 2017, 8:24am UTC](https://community.graylog.org/t/how-to-use-dell-sonicwall-firewall/1950/5 "2017-08-04T08:24:51Z")

</div>

where can I put parse\_date() function into. I just figure out that it get incorrect time

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/1X/c9a30ee7f00aac51ab9228148476489926c433e8.png). in my picuture I search log in 15PM, but the latest message just 13PM.

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [August 4, 2017, 8:29am UTC](https://community.graylog.org/t/how-to-use-dell-sonicwall-firewall/1950/6 "2017-08-04T08:29:54Z")

</div>

> [@tiendungitd](#):
>
> where can I put parse\_date() function into.

[`parse_date()`](http://docs.graylog.org/en/2.3/pages/pipelines/functions.html#parse-date) is a processing pipeline function: [http://docs.graylog.org/en/2.3/pages/pipelines.html](http://docs.graylog.org/en/2.3/pages/pipelines.html)

---

<div class="post-metadata">

**Author:** ![tiendungitd](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tiendungitd/32/622_2.png) [@tiendungitd](https://community.graylog.org/u/tiendungitd)\
**Post date:** [August 4, 2017, 8:49am UTC](https://community.graylog.org/t/how-to-use-dell-sonicwall-firewall/1950/7 "2017-08-04T08:49:47Z")

</div>

Seen like my graylog server get log slow, it alway get logs 2 hours ago, does it related this function?

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [August 4, 2017, 9:00am UTC](https://community.graylog.org/t/how-to-use-dell-sonicwall-firewall/1950/8 "2017-08-04T09:00:37Z")

</div>

It’s not slow, it’s simply the timestamps/timezones of the messages.

---

<div class="post-metadata">

**Author:** ![tiendungitd](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tiendungitd/32/622_2.png) [@tiendungitd](https://community.graylog.org/u/tiendungitd)\
**Post date:** [August 7, 2017, 3:31am UTC](https://community.graylog.org/t/how-to-use-dell-sonicwall-firewall/1950/9 "2017-08-07T03:31:20Z")

</div>

Thanks Jochen, I tried with Copy Input extractor, but not success, i will create another thread about this issue.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [August 21, 2017, 3:31am UTC](https://community.graylog.org/t/how-to-use-dell-sonicwall-firewall/1950/10 "2017-08-21T03:31:30Z")

</div>

Closed on August 21, 2017, 3:31am UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
