Login time issues

Aurelien1 · June 25, 2019, 10:07am

Hello,

I use graylog version 2.3.2 with elasticsearch version 5.6.4, and i have a problem with the login time.The first connexion is only present :

I noticed that login time only goes back to the start of the pc, but i don’t know how to resolve this issue. I have multiple sessions per computer.

Do you have any idea to help me ?

Thanks in advance.

macko003 · June 25, 2019, 2:44pm

Maybe your computer resend the logs at startup.
Start tcpdump, to check what you get on graylogside from the client.

tcpdump -nn -i any host YOUR_CLIENT_IP -AAAA

system · July 9, 2019, 2:44pm

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Graylog, log problem Graylog Central (peer support)	23	2119	March 18, 2019
Not Realtime input log Graylog Central (peer support)	4	696	June 9, 2017
Logs not showing in web ui Graylog Central (peer support)	9	13914	May 4, 2018
Issues with Graylog after moving to an elasticsearch cluster Graylog Central (peer support)	21	2654	June 24, 2018
Missing Data in Graylog, but in ElasticSearch Graylog Central (peer support)	4	674	May 20, 2020