Hi, could you please elaborate on the problem you're facing?
In general, log messages being sent to Graylog can have timestamps in the past. That's the case if the messages have been buffered somewhere between the source and Graylog. Cheers, Jochen On Wednesday, 6 May 2015 13:59:40 UTC+2, [email protected] wrote: > > I use logstash to send data to graylog. > > TCurrent time is 2015-05-06T11:57:56.375+0800, and thhe elasticsearch > records : > > graylog2_0messagef03fcf52-f3a3-11e4-89af-ecf4bbcd07e8 > INFO2015-05-06T11:05:56.375+0800151d88a2-cb4c-4057-a472-bbbc0720f20fShellLog > pid:21974, name:train_data_p54 None return not normal, need read_num:99 > storm_workerb.s.s.ShellSpoutStormWorker1.02015-05-06 03:05:56.383ShellLog > pid:21974, name:train_data_p54 None return not normal, need read_num:996 > gelf-rbin129-0755539bf3ee4b06121344c9432 > /opt/tiger/storm_env_0.9.4/apache-storm-0.9.4/logs/worker-8701.log > graylog2_0messagef03fa845-f3a3-11e4-89af-ecf4bbcd07e8 > INFO2015-05-06T11:05:56.363+0800151d88a2-cb4c-4057-a472-bbbc0720f20fShellLog > pid:21981, name:train_data_p22 None return not normal, need read_num:99 > storm_workerb.s.s.ShellSpoutStormWorker1.02015-05-06 03:05:56.383ShellLog > pid:21981, name:train_data_p22 None return not normal, need read_num:996 > gelf-rbin129-0755539bf3ee4b06121344c9432 > /opt/tiger/storm_env_0.9.4/apache-storm-0.9.4/logs/worker-8701.log > graylog2_0messagef03fa841-f3a3-11e4-89af-ecf4bbcd07e8 > INFO2015-05-06T11:05:56.361+0800151d88a2-cb4c-4057-a472-bbbc0720f20fShellLog > pid:21972, name:train_data_p36 None return not normal, need read_num:99 > storm_workerb.s.s.ShellSpoutStormWorker1.02015-05-06 03:05:56.383ShellLog > pid:21972, name:train_data_p36 None return not normal, need read_num:996 > gelf-rbin129-0755539bf3ee4b06121344c9432 > /opt/tiger/storm_env_0.9.4/apache-storm-0.9.4/logs/worker-8701.log > graylog2_0messagef03f5a22-f3a3-11e4-89af-ecf4bbcd07e8 > INFO2015-05-06T11:05:56.346+0800151d88a2-cb4c-4057-a472-bbbc0720f20fShellLog > pid:21959, name:train_data_p18 None return not normal, need read_num:99 > storm_workerb.s.s.ShellSpoutStormWorker1.02015-05-06 03:05:56.383ShellLog > pid:21959, name:train_data_p18 None return not normal, need read_num:996 > gelf-rbin129-0755539bf3ee4b06121344c9432 > /opt/tiger/storm_env_0.9.4/apache-storm-0.9.4/logs/worker-8701.log > graylog2_0messagef03f3313-f3a3-11e4-89af-ecf4bbcd07e8 > INFO2015-05-06T11:05:56.333+0800151d88a2-cb4c-4057-a472-bbbc0720f20fShellLog > pid:21987, name:train_data_p13 None return not normal, need read_num:99 > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
