# \#timestamp

**URL:** https://community.graylog.org/tag/timestamp/81.md

[Latest](https://community.graylog.org/latest.md) · [Categories](https://community.graylog.org/categories.md) · [Tags](https://community.graylog.org/tags.md)

---

## [Change timestamp in Aggregating table](https://community.graylog.org/t/change-timestamp-in-aggregating-table/36293)

<div class="topic-metadata">

**Author:** [@long.nguyen15](https://community.graylog.org/u/long.nguyen15)\
**Replies:** 1\
**Last updated:** [September 6, 2025, 1:04pm UTC](https://community.graylog.org/t/change-timestamp-in-aggregating-table/36293 "2025-09-06T13:04:38Z")

</div>

Hi everyone, I want to change timestamp from 07:00:00 to 00:00:00 cause log of AD showing wrong days. I had find but nothing issues and infomation before. How can I change please help :frowning:

---

## [Regarding the Display Time of GrayLog's Log Collection](https://community.graylog.org/t/regarding-the-display-time-of-graylogs-log-collection/35732)

<div class="topic-metadata">

**Author:** [@sering](https://community.graylog.org/u/sering)\
**Replies:** 1\
**Last updated:** [May 28, 2025, 9:42am UTC](https://community.graylog.org/t/regarding-the-display-time-of-graylogs-log-collection/35732 "2025-05-28T09:42:30Z")

</div>

Hello everyone, the timestamp of the logs I collected using Graylog differs from the actual time by 8 hours. How should I handle this?

---

## [Graylog datanode with Grafana](https://community.graylog.org/t/graylog-datanode-with-grafana/35477)

<div class="topic-metadata">

**Author:** [@lferrari](https://community.graylog.org/u/lferrari)\
**Replies:** 9\
**Last updated:** [April 25, 2025, 11:58am UTC](https://community.graylog.org/t/graylog-datanode-with-grafana/35477 "2025-04-25T11:58:24Z")

</div>

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ…

---

## [Wrong timestamp after updating from 6.1.1 to 6.1.5](https://community.graylog.org/t/wrong-timestamp-after-updating-from-6-1-1-to-6-1-5/34675)

<div class="topic-metadata">

**Author:** [@wilvh](https://community.graylog.org/u/wilvh)\
**Replies:** 12\
**Last updated:** [February 27, 2025, 11:00am UTC](https://community.graylog.org/t/wrong-timestamp-after-updating-from-6-1-1-to-6-1-5/34675 "2025-02-27T11:00:30Z")

</div>

Hi, We have updated Graylog from version 6.1.1 to 6.1.5. Since then, it seems that the timestamp with which messages are recorded is wrong. Let me explain. With version 6.1.1, messages received were saved with a UTC t…

---

## [Wrong timestamp when filtering in Event Condition](https://community.graylog.org/t/wrong-timestamp-when-filtering-in-event-condition/34929)

<div class="topic-metadata">

**Author:** [@shinichihatake97](https://community.graylog.org/u/shinichihatake97)\
**Replies:** 9\
**Last updated:** [February 19, 2025, 5:59am UTC](https://community.graylog.org/t/wrong-timestamp-when-filtering-in-event-condition/34929 "2025-02-19T05:59:48Z")

</div>

Greetings everyone, I’m facing an issue with Event Condition filter query. In the Graylog dashboard, my query runs fine, showing correct timestamp and updating data in real-time However, when filtering query in Event …

---

## [Absolute date range - not working](https://community.graylog.org/t/absolute-date-range-not-working/33769)

<div class="topic-metadata">

**Author:** [@bnerusil](https://community.graylog.org/u/bnerusil)\
**Replies:** 9\
**Last updated:** [October 30, 2024, 8:18am UTC](https://community.graylog.org/t/absolute-date-range-not-working/33769 "2024-10-30T08:18:14Z")

</div>

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ…

---

## [UTC Time zone configuration on server OS](https://community.graylog.org/t/utc-time-zone-configuration-on-server-os/33876)

<div class="topic-metadata">

**Author:** [@marziglt](https://community.graylog.org/u/marziglt)\
**Replies:** 2\
**Last updated:** [October 22, 2024, 3:17pm UTC](https://community.graylog.org/t/utc-time-zone-configuration-on-server-os/33876 "2024-10-22T15:17:37Z")

</div>

The instructions for Red Hat Installation of Graylog 6.0 strongly recommends setting the timezone to UTC on the Graylog server: sudo timedatectl set-timezone UTC but makes no mention of the OpenSearch server timezone…

---

## [Struggling With Timestamp conversion](https://community.graylog.org/t/struggling-with-timestamp-conversion/33304)

<div class="topic-metadata">

**Author:** [@EyImWawkinHeah](https://community.graylog.org/u/EyImWawkinHeah)\
**Replies:** 3\
**Last updated:** [August 23, 2024, 5:36pm UTC](https://community.graylog.org/t/struggling-with-timestamp-conversion/33304 "2024-08-23T17:36:06Z")

</div>

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ…

---

## [Alert Notification Email template: Format the timestamps/timeranges in Email](https://community.graylog.org/t/alert-notification-email-template-format-the-timestamps-timeranges-in-email/33218)

<div class="topic-metadata">

**Author:** [@LeVid](https://community.graylog.org/u/LeVid)\
**Replies:** 0\
**Last updated:** [August 8, 2024, 10:28am UTC](https://community.graylog.org/t/alert-notification-email-template-format-the-timestamps-timeranges-in-email/33218 "2024-08-08T10:28:05Z")

</div>

1. Describe your incident: Hi there, I have configured an Email notification and it works fine. Here’s how it looks: \<table width="100%" border="0" cellpadding="10" cellspacing="0" style="background-color:#f9f9f9;bor…

---

## [Winlogbeat messages pipeline yields wrong timezone](https://community.graylog.org/t/winlogbeat-messages-pipeline-yields-wrong-timezone/33030)

<div class="topic-metadata">

**Author:** [@al\_ex](https://community.graylog.org/u/al_ex)\
**Replies:** 7\
**Last updated:** [July 25, 2024, 9:32pm UTC](https://community.graylog.org/t/winlogbeat-messages-pipeline-yields-wrong-timezone/33030 "2024-07-25T21:32:21Z")

</div>

Hello everyone, I have a pipeline for incoming messages, that adds a field “hour” to each message, so that I can easily filter messages that arrived out of business hours. Unfortunately, this pipeline works differently …

---

## [Wrong Timezone value for Asia/Almaty in Inputs Settings](https://community.graylog.org/t/wrong-timezone-value-for-asia-almaty-in-inputs-settings/32148)

<div class="topic-metadata">

**Author:** [@slayerjk](https://community.graylog.org/u/slayerjk)\
**Replies:** 2\
**Last updated:** [April 18, 2024, 10:29am UTC](https://community.graylog.org/t/wrong-timezone-value-for-asia-almaty-in-inputs-settings/32148 "2024-04-18T10:29:17Z")

</div>

Hi, From 1 of March 2024 Timezone all over Kazakhstan is GMT+5 including(Asia/Almaty tz). But Graylog(version is 5.2.6) still knows about Asia/Almaty is GMT+6. I’ve noticed this while searching for logs in web console…

---

## [Gl2\_processing\_error with pipeline rules](https://community.graylog.org/t/gl2-processing-error-with-pipeline-rules/31537)

<div class="topic-metadata">

**Author:** [@Meldok](https://community.graylog.org/u/Meldok)\
**Replies:** 6\
**Last updated:** [February 29, 2024, 4:41pm UTC](https://community.graylog.org/t/gl2-processing-error-with-pipeline-rules/31537 "2024-02-29T16:41:30Z")

</div>

1. Describe your incident: In all my logs I\`ve got an error: gl2\_processing\_error Replaced invalid timestamp value in message \<44233511-cce1-11ee-9876-b42e9948155b\> with current time - Value \<2024-02-16T15:37:17.77719…

---

## [GrayLog input does not probperly process TP-link syslog (SX3008F switch)](https://community.graylog.org/t/graylog-input-does-not-probperly-process-tp-link-syslog-sx3008f-switch/31258)

<div class="topic-metadata">

**Author:** [@louis](https://community.graylog.org/u/louis)\
**Replies:** 3\
**Last updated:** [January 18, 2024, 5:01pm UTC](https://community.graylog.org/t/graylog-input-does-not-probperly-process-tp-link-syslog-sx3008f-switch/31258 "2024-01-18T17:01:53Z")

</div>

I am forwarding syslog messages from ta TP-link SX3008F switch. I was sure they where arriving at the GrayLog input … however they did not show up in the streams After spending some hours, it turned out that GrayLog did …

---

## [Can't find results when using relative time, but "all time" works](https://community.graylog.org/t/cant-find-results-when-using-relative-time-but-all-time-works/31032)

<div class="topic-metadata">

**Author:** [@bdruth](https://community.graylog.org/u/bdruth)\
**Replies:** 3\
**Last updated:** [December 24, 2023, 3:13am UTC](https://community.graylog.org/t/cant-find-results-when-using-relative-time-but-all-time-works/31032 "2023-12-24T03:13:54Z")

</div>

Just installed Graylog (docker compose, from docker-compose/open-core/docker-compose.yml at main · Graylog2/docker-compose · GitHub), total n00b. Setup the Syslog input, forwarding log events from rsyslog. I can see the …

---

## [Problelm with parsing a timestamp field](https://community.graylog.org/t/problelm-with-parsing-a-timestamp-field/31027)

<div class="topic-metadata">

**Author:** [@gdevelek](https://community.graylog.org/u/gdevelek)\
**Replies:** 1\
**Last updated:** [December 23, 2023, 3:29pm UTC](https://community.graylog.org/t/problelm-with-parsing-a-timestamp-field/31027 "2023-12-23T15:29:16Z")

</div>

1. Describe your incident: I get a lot of errors like this: OpenSearchException\[OpenSearch exception \[type=mapper\_parsing\_exception, reason=failed to parse field \[\_message\_timestamp\] of type \[date\] in document with id…

---

## [Windows Logon Session Time Monitoring](https://community.graylog.org/t/windows-logon-session-time-monitoring/30906)

<div class="topic-metadata">

**Author:** [@kfbtomas](https://community.graylog.org/u/kfbtomas)\
**Replies:** 3\
**Last updated:** [December 14, 2023, 7:45am UTC](https://community.graylog.org/t/windows-logon-session-time-monitoring/30906 "2023-12-14T07:45:58Z")

</div>

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ…

---

## [Dynamic dashboard for multiple days during Specific Time Ranges](https://community.graylog.org/t/dynamic-dashboard-for-multiple-days-during-specific-time-ranges/30387)

<div class="topic-metadata">

**Author:** [@Munzy](https://community.graylog.org/u/Munzy)\
**Replies:** 1\
**Last updated:** [October 20, 2023, 1:53am UTC](https://community.graylog.org/t/dynamic-dashboard-for-multiple-days-during-specific-time-ranges/30387 "2023-10-20T01:53:40Z")

</div>

Hello Graylog Community, I would like to ask for your help. I’ve been working with Graylog to monitor logs in the specific times, and I’ve come across a problem. Although I successfully created a dashboard that displays…

---

## [How to set date while creating index rotating strategy in time](https://community.graylog.org/t/how-to-set-date-while-creating-index-rotating-strategy-in-time/30199)

<div class="topic-metadata">

**Author:** [@Bee8080](https://community.graylog.org/u/Bee8080)\
**Replies:** 2\
**Last updated:** [October 6, 2023, 10:40am UTC](https://community.graylog.org/t/how-to-set-date-while-creating-index-rotating-strategy-in-time/30199 "2023-10-06T10:40:26Z")

</div>

Hello Community, I wanted to set index prefix with something like graylog\_alert\_MM\_DD\_YYYY for everyday since it rotates but until now i have only achieved graylog\_alert\_0, next day graylog\_alert\_1. I want to do someth…

---

## [Syslog format does not follow recommendation](https://community.graylog.org/t/syslog-format-does-not-follow-recommendation/30032)

<div class="topic-metadata">

**Author:** [@isotecviac2022](https://community.graylog.org/u/isotecviac2022)\
**Replies:** 17\
**Last updated:** [September 8, 2023, 9:55pm UTC](https://community.graylog.org/t/syslog-format-does-not-follow-recommendation/30032 "2023-09-08T21:55:07Z")

</div>

Hello friends, I come from here asking for help from experts. I have two firewalls with “syslog/udp” configured. Sophos19 and FortNet7.2 I realized that when FortNet received the logs, it was not necessary to configur…

---

## [Known issue: Timestamp mismatch between default tables and aggregated tables](https://community.graylog.org/t/known-issue-timestamp-mismatch-between-default-tables-and-aggregated-tables/29817)

<div class="topic-metadata">

**Author:** [@Fornasari](https://community.graylog.org/u/Fornasari)\
**Replies:** 2\
**Last updated:** [August 11, 2023, 11:54am UTC](https://community.graylog.org/t/known-issue-timestamp-mismatch-between-default-tables-and-aggregated-tables/29817 "2023-08-11T11:54:29Z")

</div>

1. Describe your incident: I am getting different timestamps in a dashboard for default message table and aggregated message table. The timezones are the same for root user, web browser, Graylog server and HPDM serve…

---

## [Graylog displays wrong timestamp](https://community.graylog.org/t/graylog-displays-wrong-timestamp/29497)

<div class="topic-metadata">

**Author:** [@caematos](https://community.graylog.org/u/caematos)\
**Replies:** 1\
**Last updated:** [July 12, 2023, 1:06am UTC](https://community.graylog.org/t/graylog-displays-wrong-timestamp/29497 "2023-07-12T01:06:26Z")

</div>

Hello, Our application produces the following log line in a .log file in a JSON format: {“@timestamp”:“2023-07-11T17:41:04.01258-03:00”,“@version”:“1”,“message”:"bla bla bla application message} I did not configure Gr…

---

## [Timestamp in graylog does not match logs being ingested](https://community.graylog.org/t/timestamp-in-graylog-does-not-match-logs-being-ingested/28809)

<div class="topic-metadata">

**Author:** [@djc](https://community.graylog.org/u/djc)\
**Replies:** 3\
**Last updated:** [May 17, 2023, 12:22pm UTC](https://community.graylog.org/t/timestamp-in-graylog-does-not-match-logs-being-ingested/28809 "2023-05-17T12:22:24Z")

</div>

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ…

---

## [Unable to set server timezone](https://community.graylog.org/t/unable-to-set-server-timezone/28763)

<div class="topic-metadata">

**Author:** [@walachewaka](https://community.graylog.org/u/walachewaka)\
**Replies:** 5\
**Last updated:** [May 11, 2023, 11:45pm UTC](https://community.graylog.org/t/unable-to-set-server-timezone/28763 "2023-05-11T23:45:36Z")

</div>

I’m currently running a Graylog setup through Docker Compose in Ubuntu 22.04.2, and have been unable to set the server time zone to reflect the current one im in. OS Information: Ubuntu 22.04.2 Package Version: 5.0 …

---

## [Windows server logs using NXLOG showing encrypted on Graylog](https://community.graylog.org/t/windows-server-logs-using-nxlog-showing-encrypted-on-graylog/28555)

<div class="topic-metadata">

**Author:** [@SodOB](https://community.graylog.org/u/SodOB)\
**Replies:** 12\
**Last updated:** [May 2, 2023, 7:03am UTC](https://community.graylog.org/t/windows-server-logs-using-nxlog-showing-encrypted-on-graylog/28555 "2023-05-02T07:03:04Z")

</div>

I recently configured some Windows 2016 servers with NXLOG and Graylog, but the logs are showing encrypted, like in the screenshot attached on Graylog. OS Information: Red Hat, Inc. 1.8.0\_362 on Linux 3.10.0-1160.81.…

---

## [@timestamp field format in Graylog GUI Search doesn't show as UTC ISO8601 sent by filebeat beat](https://community.graylog.org/t/timestamp-field-format-in-graylog-gui-search-doesnt-show-as-utc-iso8601-sent-by-filebeat-beat/28600)

<div class="topic-metadata">

**Author:** [@armesh](https://community.graylog.org/u/armesh)\
**Replies:** 8\
**Last updated:** [April 29, 2023, 3:29am UTC](https://community.graylog.org/t/timestamp-field-format-in-graylog-gui-search-doesnt-show-as-utc-iso8601-sent-by-filebeat-beat/28600 "2023-04-29T03:29:40Z")

</div>

Environment: Ubuntu 22.04.2 LTS Graylog 5.0.6 Filebeat 8.7.0 Incident: I made an input to receive logs from Filebeat. Filebeat is picking telegram\*.txt Filebeat sent over the log at 2023-04-28 12:26:27 PM GMT +8. …

---

## [The timestamp returned by the graylog API is abnormal](https://community.graylog.org/t/the-timestamp-returned-by-the-graylog-api-is-abnormal/28178)

<div class="topic-metadata">

**Author:** [@lvjw](https://community.graylog.org/u/lvjw)\
**Replies:** 9\
**Last updated:** [March 24, 2023, 5:26am UTC](https://community.graylog.org/t/the-timestamp-returned-by-the-graylog-api-is-abnormal/28178 "2023-03-24T05:26:26Z")

</div>

I use the API provided by Graylog, but the timestamp of the returned data is located in UTC. The user and system time zones have also been modified to the current time zone, but there is no way to return the normal time …

---

## [Root\_timezone is set but still getting UTC](https://community.graylog.org/t/root-timezone-is-set-but-still-getting-utc/27117)

<div class="topic-metadata">

**Author:** [@hungv35](https://community.graylog.org/u/hungv35)\
**Replies:** 13\
**Last updated:** [January 3, 2023, 4:59am UTC](https://community.graylog.org/t/root-timezone-is-set-but-still-getting-utc/27117 "2023-01-03T04:59:26Z")

</div>

i have set root\_timezone as Asia/Ho\_Chi\_Minh ( /etc/graylog/server/server.conf): timezone = Asia/Ho\_Chi\_Minh but user is still getting UTC time: “Last Activity” show UTC time not what i set time configuration is A…

---

## [Increase timestamp precision](https://community.graylog.org/t/increase-timestamp-precision/26214)

<div class="topic-metadata">

**Author:** [@m\_mlk](https://community.graylog.org/u/m_mlk)\
**Replies:** 3\
**Last updated:** [October 20, 2022, 3:45pm UTC](https://community.graylog.org/t/increase-timestamp-precision/26214 "2022-10-20T15:45:34Z")

</div>

1. Describe your incident: We see that several log entries for different events have the same timestamp in Graylog, for example: 2022-10-18 17:02:20.688 2022-10-18 17:02:20.688 This introduces huge problem for us bec…

---

## [Various basic questions - Log Truncation, Formats, time stamps, etc](https://community.graylog.org/t/various-basic-questions-log-truncation-formats-time-stamps-etc/26172)

<div class="topic-metadata">

**Author:** [@boomam](https://community.graylog.org/u/boomam)\
**Replies:** 15\
**Last updated:** [October 20, 2022, 2:26am UTC](https://community.graylog.org/t/various-basic-questions-log-truncation-formats-time-stamps-etc/26172 "2022-10-20T02:26:00Z")

</div>

Hi, I’m attempting to solve a few inherent issues with Unraid, all revolving around logs, and pushing them into Graylog. As a pre-req, I am new to Graylog, I have read as much of the docs as I can, however without know…

---

## [Set timezone in JSON log?](https://community.graylog.org/t/set-timezone-in-json-log/25616)

<div class="topic-metadata">

**Author:** [@Peter2121](https://community.graylog.org/u/Peter2121)\
**Replies:** 3\
**Last updated:** [September 8, 2022, 9:38pm UTC](https://community.graylog.org/t/set-timezone-in-json-log/25616 "2022-09-08T21:38:43Z")

</div>

Hello, I’m using Graylog 4.2.4 on FreeBSD. I’m trying to process a syslog input using JSON extractor. Everything works fine, but I have a problem with timezone. The timestamp I receive from the remote device is in “yyy…

[Next page](https://community.graylog.org/tag/timestamp/81.md?match_all_tags=true&page=1&tags%5B%5D=timestamp)
