Ok, confusing and odd.
Perhaps it relates to how logs are stored, using timestamps not as they
arrive but as they are sent. Can one of the devs clarify? The console show
below that I am logging at 16:26 or so, some test "logger here I am". Thats
the correct time (UK, summer time)
{dev}[root@elast-elastic ~]# logger here I am
{dev}[root@elast-elastic ~]# logger here I am
{dev}[root@elast-elastic ~]# date
Wed May 28 16:26:05 BST 2014
{dev}[root@elast-elastic ~]#
Thes are deliverd via rsyslog, to graylog2 server and in the graylog
(0.20.2) web interface, these logs are stamped:
Timestamp Source Message
2014-05-28 15:26:04.000
elast-elastic
elast-elastic ec2-user: here I am
The problem is that all machines log "early" - one hour early, and graylog
searches on 'now' from 5 minutes, 10 and so on. Its 'now' is one hour later.
Can anyone explain why graylog searches from 'now' in BST, but logs in UTC
(I assume).
Is it simply a mismatch? The browser I use is on a Mac running BST, the
graylog server and web server run on that timezone. The user I am logged in
as on the web interface is set to the BST timezone as well.
Cheers
--
----------------------------------------------------------------------------------
The information in this email is confidential and may be legally
privileged. It is intended solely for the addressee. Access to this email
by anyone else is unauthorised. If you are not the intended recipient, any
disclosure, copying, distribution or any action taken or omitted to be
taken in reliance on it, is prohibited and may be unlawful.
Policy Expert is a trading name of QMetric Group Limited who is authorised
and regulated by the Financial Conduct Authority. The registered company
address of QMetric Group Limited is: 32-38 Dukes Place, London, EC3A 7LP
and its company registration number is 07151701.
--
You received this message because you are subscribed to the Google Groups
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
