Hi Amilcar, the two timestamps denote the same date and time but using a different timezone (the one in the message details being UTC).
See https://github.com/Graylog2/graylog2-server/issues/2689 for a related issue on GitHub. Cheers, Jochen On Friday, 30 December 2016 23:14:26 UTC+1, Amilcar Martinez wrote: > > Hello, > I've installed graylog and am successfully receiving messages from a > windows computer with nxlog. The set up i'm using is: > OS: CentOS 7 > elasticSearch: 2.4.3 > graylog-server: 2.1.2 > On the windows client, nxlog 2.9.1716 > > The messages display two timestamps, one is correct while the other is > wrong, its ahead of time. Below is a pic. > > I'm not sure where the bottom timestamp is coming from, i think its either > elasticsearch or the nxlog client. Can someone she somelight as to what is > going on? Why are there two timestamps to begin with? > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/81340c4f-8154-4295-8fb8-de52efd2f9ef%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.