Graylog_Content_Pack_WinDNS icon indicating copy to clipboard operation
Graylog_Content_Pack_WinDNS copied to clipboard

Issue with date format - WINDNS_TIME

Open mathieuchateau opened this issue 3 years ago • 1 comments

I had issue with WINDNS_TIME, as our AD Servers are in French, date format is French.

I replaced with this grok pattern : %{MONTHDAY}/%{MONTHNUM}/%{YEAR} %{HOUR}:%{MINUTE}:%{SECOND}

It's not useful but then extractor started to work

mathieuchateau avatar May 24 '21 17:05 mathieuchateau

Similar issue, but Swedish locale.

I had to set WINDNS_TIME to: %{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{HOUR}:%{MINUTE}:%{SECOND}

Henkoba avatar Dec 07 '21 08:12 Henkoba