# Log date fortinet

**URL:** <https://community.graylog.org/t/log-date-fortinet/1951>\
**Category:** Graylog Central (peer support)\
**Created:** [August 3, 2017, 12:23pm UTC](https://community.graylog.org/t/log-date-fortinet/1951 "2017-08-03T12:23:58Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Boyl4n](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/boyl4n/32/654_2.png) [@Boyl4n](https://community.graylog.org/u/Boyl4n)\
**Post date:** [August 3, 2017, 12:23pm UTC](https://community.graylog.org/t/log-date-fortinet/1951/1 "2017-08-03T12:23:58Z")

</div>

Hi,

I’m a beginner on Graylog.

Since version 2.2.2, Graylog takes native Fortigate logs.  
But with versions 2.2.3 and 2.3, I have a problem of date or rather schedule.

My FortiGate is in GMT + 1 but Graylog must work in UTC format.  
[![](https://cdck-file-uploads-us1.s3.dualstack.us-west-2.amazonaws.com/flex016/uploads/graylog/original/1X/6601b9814d30734f534432fab7ec19792ba33edd.png)](https://www.hostingpics.net/viewer.php?id=408338LogForti.png)

A solution ? 🙂

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [August 3, 2017, 12:28pm UTC](https://community.graylog.org/t/log-date-fortinet/1951/2 "2017-08-03T12:28:47Z")

</div>

Try using a Raw/Plaintext input and extract the relevant parts of the messages using extractors (Grok extractor) or processing pipeline rules.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [August 17, 2017, 12:50pm UTC](https://community.graylog.org/t/log-date-fortinet/1951/3 "2017-08-17T12:50:03Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.