Hi, please elaborate on your problem. I'm not sure what you're trying to say.
What did you expect to happen or retrieve? What did actually happen? As far as I see, the timestamps of the log messages are correct. Cheers, Jochen On Saturday, 4 February 2017 10:48:25 UTC+1, [email protected] wrote: > > My graylog server always collect expired logs, these logs are generated > long before , and now the switch has no such logs. > [image: image] > <https://cloud.githubusercontent.com/assets/24647716/22615473/4bef9a9a-ead0-11e6-9fc6-16e97d29dc70.png> > > The current log's source is 2017, The log whose source is > G1-K115-ACC-SW-48 is very early, but the server is collecting now. > > This problem has troubled me for weeks. How to solve this problem? > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/d6652b9a-7ce9-4be2-954c-52a3ec882930%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
