Concerning log ingestion time stamps, we notice that the log entry timestamp and the event time stamp stamp don't quite match. At this point it really only seems to be off by a few milliseconds. I'm assuming that the log time stamp is the time the log was ingested into graylog (we used nxlog with collector-sidecar). Just wanted to check in to see if there is something in our configuration we could have done differently to tighten up the difference?
Hello There,
Concerning log ingestion time stamps, we notice that the log entry timestamp and the event time stamp stamp don't quite match. At this point it really only seems to be off by a few milliseconds. I'm assuming that the log time stamp is the time the log was ingested into graylog (we used nxlog with collector-sidecar). Just wanted to check in to see if there is something in our configuration we could have done differently to tighten up the difference?