I don't believe - how STUPID of me!!! Spot on - I was testing this by working on an apache access_log file I copied over on Saturday and by the time I stopped fiddling and started testing, it was days old. And then didn't even think to expand the search to multiple days. D'oh!!!
Working fine now :-) -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.