I’ve asked @jalogisch on a different place that it is currently not possible to tell whether Graylog has taken the timestamp from the message or it has used the ingest time. I tought that it’s useful if it can be distinguished.
actually the next version of Graylog 3.1 will have the input time in Graylog and some more available. With that you could actually see where the timestamp is coming from.
If you think that this is not enough - create a feature request over at Github: https://github.com/Graylog2/graylog2-server/issues
1 Like
Thanks that it’s very helpful if we can see where the timestamp is actually coming from.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.