Wrong timestamp?


#1

We are getting the message with the following content

EXAMPLE
full_message

<132>Jan 19 21:26:16 TJXY warning tmm2[14272]: 01260009:4: Connection error: ssl_hs_rxhello:7664: unsupported version (40)

But the graylog timestamp field logged it as

timestamp

2018-01-19T13:26:16.000Z

How do i change the timestamp to match the one receive?

The graylog server time stamp matches the syslog source message timestamp so I am curious where did graylog derive the value of the timestamp field?


#2

It looks like your timezone is 8 hours earlier than UTC. Graylog seems to think the received message is in local timezone instead of UTC and converts it to UTC.


(Jochen) #3

Related GitHub issue:


(system) #4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.