Working like a charm, thank you :) Le mercredi 2 décembre 2015 10:33:51 UTC+1, Jochen Schalanda a écrit : > > Hi Alex, > > the Graylog Collector file input basically just reads in text files and > sends them line-by-line to Graylog. It doesn't parse those lines in any > way. If you want to use the original timestamp of the log messages in your > file(s) as message timestamp in Graylog, you'll have to add one or more > extractors to the GELF TCP input which parses the message and extracts the > correct timestamp. > > > Cheers, > Jochen > > > On Tuesday, 1 December 2015 17:20:02 UTC+1, Alex B. wrote: >> >> Hello, using graylog 1.2.2 and collector 0.4.1, there is a big difference >> between graylog timestamp and log file timestamp. >> >> A line in a logfile with a 17:11:34,887 timestamp can have a 17:11:53.328 >> timestamp in graylog, which is a 20 seconds difference ! >> >> I'm currently testing collector to replace nxlog, don't have this problem >> with nxlog as you can apply parsedate on date field and send it as event >> time. >> >> Ty >> >
-- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/d8d0280c-d3e1-48dc-ab13-36e1b285da41%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
