Graylog_Content_Pack_WinDNS
Graylog_Content_Pack_WinDNS copied to clipboard
Issue with date format - WINDNS_TIME
I had issue with WINDNS_TIME, as our AD Servers are in French, date format is French.
I replaced with this grok pattern : %{MONTHDAY}/%{MONTHNUM}/%{YEAR} %{HOUR}:%{MINUTE}:%{SECOND}
It's not useful but then extractor started to work
Similar issue, but Swedish locale.
I had to set WINDNS_TIME to: %{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{HOUR}:%{MINUTE}:%{SECOND}