We recently had the problem that some of our machines were running with a system time several days in the future. Since the log's timestamps are used when indexing in graylog, those log entries only showed up when selecting a future timeframe, not when they really were logged.
Is it somehow possible to override the default of using the timestamp from the log and instead generate a timestamp when the logs are received? We are using logback 1.3.4 and are either using rsyslogd on ubuntu for system level logging or the Moocar gelf library for logback for java applications: https://marketplace.graylog.org/addons/a57457e4-dc2a-487e-aa75-6f1a1c1b3806 Regards, Ron. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/0ead888c-9b31-42d1-9ef5-5ff61a8a5c4c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
