I'm parsing local log files, so the timestamp that matters is the one from log file.
For some reason, everything seems to be based on ingest time :
Even though log time is correctly parsed on an entry :
Main window also show a time on the left that is the ingest time :
I'm trying to get a comprehensive time based view of log distribution to see when logs stop, last messages, etc.
I'm parsing local log files, so the timestamp that matters is the one from log file.
For some reason, everything seems to be based on ingest time :
Even though log time is correctly parsed on an entry :
Main window also show a time on the left that is the ingest time :
I'm trying to get a comprehensive time based view of log distribution to see when logs stop, last messages, etc.