Incorrect Timestamp on logs recieved SYSLOG UDP


(RV) #1

Greetings,

I am new to this,so I have installed the VM appliance and its working fine however the logs I am getting from my firewall have an incorrect timestamp with them. Though the mouse tooltip text shows the correct time. My firewall and graylog server are on the same timezone.

![Image1|690x289])

-RV


(RV) #2

As a new user I had to post the second pic the comments


Fortigate graylog modifies timestamp?
(Jochen) #3

The messages from your FortiGate devices don’t contain a timezone information, so Graylog assumes they’re UTC.

For example the second message includes date=2017-11-21 time=13:13:20, which Graylog assumes is 2017-11-21T13:13:20Z. Then Graylog displays the message timestamp in your configured timezone (+5:30), which is 2017-11-21T18:43:20.000.

If you want to modify the date of the messages, you can do so in a pipeline rule:
http://docs.graylog.org/en/2.3/pages/pipelines.html

Also check out the following related feature request:


(system) #4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.