Login time issues

Hello,

I use graylog version 2.3.2 with elasticsearch version 5.6.4, and i have a problem with the login time.The first connexion is only present :

I noticed that login time only goes back to the start of the pc, but i don’t know how to resolve this issue. I have multiple sessions per computer.

Do you have any idea to help me ?

Thanks in advance.

Maybe your computer resend the logs at startup.
Start tcpdump, to check what you get on graylogside from the client.

tcpdump -nn -i any host YOUR_CLIENT_IP -AAAA

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.