Hi, I deleted the command that send logs to graylog server in the switch, But, graylog can receive the logs of this switch as before. I don't know where those logs received by the graylog server come from?
<https://lh3.googleusercontent.com/-s1zELVGLS_4/WJfnIXR4eLI/AAAAAAAAAAM/JLr0beJpbmgyHv6RFo_8ZVuVDuW6WNxpgCLcB/s1600/QQ%25E6%2588%25AA%25E5%259B%25BE20170206110452.png> The switch do not send logs to graylog, But, graylog can receive the logs of this switch as before. As shown in FIG. 在 2017年2月4日星期六 UTC+8下午6:07:06，Jochen Schalanda写道： > > Hi, > > please elaborate on your problem. I'm not sure what you're trying to say. > > What did you expect to happen or retrieve? What did actually happen? > As far as I see, the timestamps of the log messages are correct. > > Cheers, > Jochen > > On Saturday, 4 February 2017 10:48:25 UTC+1, ql.w...@163.com wrote: >> >> My graylog server always collect expired logs, these logs are generated >> long before , and now the switch has no such logs. >> [image: image] >> <https://www.google.com/url?q=https%3A%2F%2Fcloud.githubusercontent.com%2Fassets%2F24647716%2F22615473%2F4bef9a9a-ead0-11e6-9fc6-16e97d29dc70.png&sa=D&sntz=1&usg=AFQjCNHn4s-cddXkUqyzVtF1SmKgF5blNw> >> >> The current log's source is 2017, The log whose source is >> G1-K115-ACC-SW-48 is very early, but the server is collecting now. >> >> This problem has troubled me for weeks. How to solve this problem? >> > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/4d41af0f-a8ab-45bb-89c9-c03602ee4788%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
