By default ubuntu uses ntpd daemon, check your NTP settings in /etc/ntp.conf
Default NTP servers are 0-3.ubuntu.pool.ntp.org and falback ntp.ubuntu.com
Check if your firewall don’t block it, or if you want to use local NTP server, comment all lines pool 0-3.ubuntu.pool.ntp.org and pool ntp.ubuntu.com with replace your own ntp.
I have better experience with chrony NTP daemon than ntpd, it can fix time rapidly. You can replace ntpd with chrony by installing chrony (sudo apt install chrony) and setup /etc/chrony/chrony.conf file
NTP sync is recommended by graylog docs: Important: All systems running Graylog must have synchronised system time. We strongly recommend to use NTP or similar mechanisms on all machines of your Graylog infrastructure.
Anyway, it’s a problem of VirtualBox and not graylog at all. So check this:
Edit VM settings in VirtualBox and check System - Motherboard - Hardware clock in UTC Time
Or install VirtualBox guest addition to time sync guest OS with host without NTP
So the root_timezone at server.conf should be left default (commented) UTC.
The OS timezone and datetime must be set according to local settings
The user’s (<>admin) timezone must be set must be set according to local settings
When on Oracle VM - check `Hardware clock in UTC Time