I am running Graylog as the root (Admin) user and configured the timezone to my local time:
#root_timezone = UTC root_timezone = America/New_York
I am using Grafana to visualize some logs and noticed that after their recent update (Grafana V6.6), all my timestamps are in UTC even though Graylog displays in my configured and desired timezone. I did some research and their recommendations are to change Elasticsearch timezone to UTC and this issue should go away but if I do, I can no longer see my logs in Graylog on the timezone I’ve setup (at least I think it will change).
Here’s some screenshots:
What is the best practice in this case?