Hi Hasan, please provide some example messages, some example search queries (including what you expect what the actual result is), and the time zone configuration you see in the web interface on the System -> Overview page.
Cheers, Jochen On Tuesday, 12 April 2016 15:17:52 UTC+2, hasan akgöz wrote: > > Hi Jochen, > > I configured web user timezone "Europe/Istanbul". I get to log gelf > protocol. I using graylog-collector product. Yes I'am sure, log source > is come with a proper timestamp and time configuration box on graylog-web > is seems ok. But timestamp column and search box time is false. if you > wanna any configuration field or screenshot I can show you. I'm looking > for in the following way. Keyword time frame selector. like this is "4 > hours ago". But preview is false. > > Cheers, > Hasan > > > On Tuesday, April 12, 2016 at 3:47:49 PM UTC+3, Jochen Schalanda wrote: >> >> Hi Hasan, >> >> which timezone did you configure for the logged in Graylog user? How >> exactly are you ingesting logs (GELF, syslog, or other inputs)? Are you >> sure they come with a proper timestamp (e. g. ISO 8601, including a >> timezone)? >> >> Cheers, >> Jochen >> >> On Tuesday, 12 April 2016 14:34:06 UTC+2, hasan akgöz wrote: >>> >>> I use graylog-web 1.3.4. I set timezone configuration "Europe /Istanbul" >>> . Time configuration space as everything seems ok. But when I specify a >>> date range of the search area it shows the value back to 1 hour and >>> time stamp column is 1 hours ago shows. For example, my system clock is >>> 15:00 am. I want to previous 1 hours ago logs. But the results are coming >>> up empty. When I change my time range for example 2 hours ago records >>> after result comes. but results is false. results is 1 hour ago records >>> from the last 14.00 hours.. I view elasticsearch record query returns the >>> answer for system clock back 1 hour records. How can I fix this >>> problem? Where should I look? >>> >>> Operation System : Debian 8.03 ( jessie ) >>> JDK version : oracle jdk-8u77 >>> mongo db version : 2.4.10 >>> Elasticsearch version 1.7.5 >>> >> -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/ab895cfb-a882-427f-937d-fc9b0bb67aba%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
