logs are not forwarded if windows time-date is changed backwards


#1 juanjo

Hi!

We have nxlog ce running in a Windows machine. It works ok.

  • If time is changed to the future, it continues forwarding logs.
  • However, if time is changed to the past, logs are not forwarded anymore. This affects to logs from windows events, from a text file, etc.

It seems that nxlog is filtering the logs and that logs with a previous time than others received are discarded. Logs are forwarded again if nxlog service is restarted (this seems to be doing a 'reset' on expected time) Do you know how could we avoid this?

#2 KlevinDeactivated Nxlog ✓
#1 juanjo
Hi! We have nxlog ce running in a Windows machine. It works ok. If time is changed to the future, it continues forwarding logs. However, if time is changed to the past, logs are not forwarded anymore. This affects to logs from windows events, from a text file, etc. It seems that nxlog is filtering the logs and that logs with a previous time than others received are discarded. Logs are forwarded again if nxlog service is restarted (this seems to be doing a 'reset' on expected time) Do you know how could we avoid this?

Hello Sir,

May i ask if there is any specific reason you change the date of the machine? What specific data do you need to re-gather?

Sincerely Klevin