Hi Jochen,

I modified the root_timezone in server.conf to GMT+4, and now the timestamp 
on display matches that of my local timezone. However, when I mouse over 
it, it still display UTC time. In each of the messages, the timestamp still 
show UTC time.

The problem is that when an alert email is sent, the Date is showing UTC 
time. For example (in the alert email):

Alert Description: Stream had 1 messages in the last 1 minutes with trigger 
condition more than 0 messages. (Current grace time: 1 minutes)

Date: 2016-10-18T17:29:28.992Z

The message has a timestamp field:

timestamp: 2016-10-18T17:28:55.644Z 

In actuality, the  timestamp of the application log message was 13:28:55.644

So it is always reporting UTC time, and not local timezone that I 
configured in server.conf and the extractor.

Is it something that will be fixed later?



On Tuesday, October 18, 2016 at 12:13:24 PM UTC-4, Jochen Schalanda wrote:
> Hi Wayne,
> On Tuesday, 18 October 2016 17:04:34 UTC+2, Wayne wrote:
>> The converted timestamp: 2016-10-18 15:01:34.559
>> and the real timestamp from application log is: 2016-10-18 11:01:34:559
>> There is a four hour difference (when the timezone is configured as 
>> either "Toronto" or "GMT+4"
> That sounds correct to me. Mind that the timestamp is always being stored 
> in UTC and only adapted to the user's configured timezone on display.
> See https://github.com/Graylog2/graylog2-server/issues/2689 for a related 
> issue on GitHub.
> Cheers,
> Jochen

You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
For more options, visit https://groups.google.com/d/optout.

Reply via email to