Hi Hasan, which timezone did you configure for the logged in Graylog user? How exactly are you ingesting logs (GELF, syslog, or other inputs)? Are you sure they come with a proper timestamp (e. g. ISO 8601, including a timezone)?
Cheers, Jochen On Tuesday, 12 April 2016 14:34:06 UTC+2, hasan akgöz wrote: > > I use graylog-web 1.3.4. I set timezone configuration "Europe /Istanbul" . > Time configuration space as everything seems ok. But when I specify a > date range of the search area it shows the value back to 1 hour and time > stamp column is 1 hours ago shows. For example, my system clock is 15:00 > am. I want to previous 1 hours ago logs. But the results are coming up > empty. When I change my time range for example 2 hours ago records after > result comes. but results is false. results is 1 hour ago records from the > last 14.00 hours.. I view elasticsearch record query returns the answer > for system clock back 1 hour records. How can I fix this problem? Where > should I look? > > Operation System : Debian 8.03 ( jessie ) > JDK version : oracle jdk-8u77 > mongo db version : 2.4.10 > Elasticsearch version 1.7.5 > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/43292254-f0f1-42fd-bca1-866f3c5669ef%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
