How can we get cribl to keep the time within the log?
Answers
-
hmmm, okay I will check this out
0 -
I applied that change, and it looks like the events are still coming in mixed up. For example it is 13:33 my time but events are bing index -5 hours
0 -
What is the time showing where the forwarder is running?
0 -
`date`
0 -
And what is the version of the forwarder?
0 -
So this is what is really odd. Here is an _internal log and this is behaving as expected
0 -
ohh, I see in the internal log, it has -0500
0