Sebastian Röbke

`X-Forwarded-For` can contain multiple entries, and extra care needs to be taken to extract the real IP (e.g., it should be allowed to configure a list of known proxies): https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Forwarded-For#security_and_privacy_concerns...

For inspiration: Grafana shows all values at the x axis, but highlights the mouse over one by making it bold. The small data table is also less noisy than ours...

I think adding a warning when renaming a rule (mentioned as one of the possible solutions in the description) could be a good next step.

If we would ever want to enable the [indexing and processing failure handling](https://docs.graylog.org//v1/docs/indexer-and-processing-failures) in Graylog Enterprise / Cloud by default, I think this issue would be a prerequisite.

Hi @BBruce-Graylog, this has been assigned to the Search Team, so I would ask @dennisoelkers to comment on this.

> I would also add that the inserted timestamp comes from the nodes themselves, so their clocks need to be carefully synced to make the ordering reliable. Does it have...