0

I've integrated our PHP web application using Monolog recently and added support for logging into Graylog. Until very recently I've used the Graylog VM and I've successfully logged all the information sent to it.

We've now started a full-fledged dedicated Graylog server : the server is currently logging syslog info through UDP and again it's working perfectly.

However for various reasons we chose to use an HTTP input for the application I'm working on so I created an HTTP local input in Graylog (for the record, I tried a global one, too). No logs from that application are found, however. No exception is raised in the application, which is what would happen in case of a connection error for instance, plus I'm using the exact same configs than on my VM so I'm fairly certain the problem is not on the application side.

What's even stranger is that Graylog does receive traffic on that input !

You can see on the right, in pale gray, that there is traffic on the input but 0 bytes have been processed - or, well, I'm not quite sure what this means.

So: what does that mean? How can I debug and fix this problem?

SolarBear
  • 101
  • 2

1 Answers1

0

I noticed something strange : I had logs for the previous day that were logged around 9 PM, 5 hours after I actually logged those. Since I'm in a GMT-5 timezone, I thought this might be the problem and it was: the server had the right time but the timezone was GMT+0.

So if anyone stumbles on this kind of problem, make sure to make a search for logs in the future: Graylog only searches back from the current moment by default, you need to select "Absolute" search from the blue icon in the top left and then manually select your starting and ending datetimes.

TL;DR Changing the server timezone fixed the problem. Make sure to check for logs in the future.

SolarBear
  • 101
  • 2