Timestamp Issues:
Issue: Data from particular forwarder has +3 hrs difference for all events
Root cause: NTP Protocol Sync was not configured for that Forwarder.
Solution: Configure NTP Protocol sync on that particular server & restart the forwarder.
Root cause: NTP Protocol Sync was not configured for that Forwarder.
Solution: Configure NTP Protocol sync on that particular server & restart the forwarder.