Hi, On Thursday, 6 October 2016 13:57:51 UTC+2, Hans Maulwurf wrote: > > is it possible to use the timestamp that I extract out of a message > instead of the graylog-timestamp? >
Yes, that's possible using extractors <http://docs.graylog.org/en/2.1/pages/extractors.html> or the message processing pipeline <http://docs.graylog.org/en/2.1/pages/pipelines.html>. Just make sure that the timestamp field has the correct format ( YYYY-MM-DD'T'HH:mm:ss.SSS, basically an ISO-8601 <https://en.wikipedia.org/wiki/ISO_8601> timestamp without timezone). Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/f0e27c33-c27f-4c18-bdcb-f1bc8b5da7a3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
