Hello, Since I updated Graylog I have problems with time. In fact, now I have 2 differents times when I receive logs : [Capture] I have the same problem on my differents inputs: - Syslog TCP on port 5514, 5513 - Gelf TCP on port 12201 I have note that the time configuration of the server is …

from what Version did you update? what is the server time of the sending server? does the sending server include timezone information in the timstamp? what is the timezone of the user you are using? did you change anything else?

Why exactly you opened a new topic and did not just move on in the old? [image] Time configuration incorrect Graylog Central (peer support) I guess you did not get it. root_timezone is the timezone that the user admin - the default superuser - has. His profil is not edit…

I don’t have timezone information in the timestamp. I update from 2.4.5 to 2.4.6

with no timezone information Graylog assume that the input timezone is UTC.

[image] jan: with no timezone information Graylog assume that the input timezone is UTC. So I have to get timezone in the rsyslog configuration of the other server

that would be the easiest way to solve it at the sender.

[image] jan: that would be the easiest way to solve it at the sender. Yes I try to change the format with rsyslog but I have already the same problem. I have try to use different template like that : $template RFC3164fmt,“<%PRI%>%TIMESTAMP% %HOSTNAME% %syslogtag%%msg%”

Do you have an idea ? Because it’s not good when I receive log, because the timestamp it’s not good time. Thanks in advance

Because it’s not possible to configure directly on the Graylog server. Thanks for your help

you might find this post / pipeline rule helpful to correct the time of message with a pipeline [image] All messages search doesn't seem to include "all messages" Graylog Central (peer support) you would need to correct the timestamp of the messages with extractors or the…

Incorrect time in log

Graylog Central (peer support)

jan (Jan Doberstein) August 20, 2018, 3:46pm 3

Why exactly you opened a new topic and did not just move on in the old?

Topic		Replies	Views
Replacing default Graylog timestamp via Pipeline Processor Graylog Central (peer support) pipeline-rules , debuggingpl	12	11615	March 11, 2019
Fortigate graylog modifies timestamp? Graylog Central (peer support)	16	3207	July 2, 2018
Timezone Help for single syslog device Graylog Central (peer support) pipeline-rules	2	529	June 24, 2021
Updating correct timestamp for logs Graylog Central (peer support) pipeline-rules , debuggingpl	4	3441	September 11, 2020
Still having timestamp issues Graylog Central (peer support) pipeline-rules	3	2857	July 4, 2019

Incorrect time in log

Related topics