Hello, using graylog 1.2.2 and collector 0.4.1, there is a big difference between graylog timestamp and log file timestamp.
A line in a logfile with a 17:11:34,887 timestamp can have a 17:11:53.328 timestamp in graylog, which is a 20 seconds difference ! I'm currently testing collector to replace nxlog, don't have this problem with nxlog as you can apply parsedate on date field and send it as event time. Ty -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/7c20ce44-6c6d-412e-aa0b-b8f0d8f2031f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
