Syslog input timezone issue

Graylog Central (peer support)
2

It depends also on server (graylog box) timezone settings. Graylog then shows timestamps in user’s defined timezone settings (in web interface).

  1. Check timezone settings in graylog box using command: timedatectl
  2. For user admin, timezone for web interface is setup in server.conf parameter root_timezone, edit it with sudo vim /etc/graylog/server/server.conf
  3. You can change timezone of users manually (instead of admin) one by one in System - Authentication - Users - Edit - field Timezone
  4. Every user can change own timezone using Edit profile after login
1 Like