Hello! I’m having this problem with the timestamp in Slack notifications that not matches with the rest of timestamps (event, log inputs, etc.). I’d like to collect all the logs in my local time (America/Argentina/Buenos_Aires):
1. Describe your incident:
The timestamp of the Slack alerts is not equal to everyone else on Graylog web interface and/or the logs of the inputs configured. Let me show an example:
- My Date/time are in local time (it’s Ok):
Date command output:
Wed Jul 13 16:30:41 -03 2022
Hwclock command output:
2022-07-13 16:30:45.188264-03:00
- The timestamp in the test events submitted are similar and it’s OK:
Timestamp
2022-07-13 16:30:45.200
timestamp
2022-07-13 16:30:45.200
- But the alerts timestamp is not Ok, including the backlog timestamp arrived:
There is a difference of 3 hours approximately.
2. Describe your environment:
-
OS Information: AWS EC2 instance, Ubuntu 22.04 LTS (Jammy Jellyfish)
-
Package Version:
Docker images: Mongo (latest), elasticsearch 7.10.2, Graylog 4.3.3.
Docker version 20.10.17, build 100c701
docker-compose version 1.29.2, build unknown -
Service logs, configurations, and environment variables:
3. What steps have you already taken to try and solve the problem?
- I already tried previously changing the docker-compose.yml configuration, about the localtime and timezone system files (mounted as volumes):
/etc/timezone:/etc/timezone:ro
/etc/localtime:/etc/localtime:ro
- Already I changed the env variables related to date and time on graylog container:
GRAYLOG_ROOT_TIMEZONE=America/Argentina/Buenos_Aires
TZ=America/Buenos_Aires
I understand (if I’m not wrong) the “timedatectl” command output it’s ok and don’t need any edit. Take this example:
Local time: Wed 2022-07-13 16:32:45 -03
Universal time: Wed 2022-07-13 19:32:45 UTC
RTC time: Wed 2022-07-13 19:32:45
Time zone: America/Argentina/Buenos_Aires (-03, -0300)
System clock synchronized: yes
NTP service: active
RTC in local TZ: no
- Already I restarted the containers and docker daemon (before and after changes, respect to system date and time)
4. How can the community help?
I’d like to fix this issue and receive alerts using the local time like everyone else logs.
Thank you to all from before.
