topic TA-pfsense logs start then... stop in All Apps and Add-ons https://community.splunk.com/t5/All-Apps-and-Add-ons/TA-pfsense-logs-start-then-stop/m-p/482213#M59291 <P>I have a weird issue with the TA-pfsense TA.</P> <P>I can get logs in for about half a second and then they just mysteriously stop.</P> <P>A packet trace shows the logs are still being sent and the port is remaining open.</P> <P>splunkd.log has something interesting though:</P> <P>01-12-2020 17:25:30.970 +0800 WARN DateParserVerbose - A possible timestamp match (Sun Sep 9 09:48:25 2001) is outside of the acceptable time window. If this timestamp is correct, consider adjusting MAX_DAYS_AGO and MAX_DAYS_HENCE. Context: source=udp:5016|host=pfsense_hostname|pfsense|</P> <P>Any ideas please?</P> Wed, 30 Sep 2020 03:38:40 GMT j_stock 2020-09-30T03:38:40Z TA-pfsense logs start then... stop https://community.splunk.com/t5/All-Apps-and-Add-ons/TA-pfsense-logs-start-then-stop/m-p/482213#M59291 <P>I have a weird issue with the TA-pfsense TA.</P> <P>I can get logs in for about half a second and then they just mysteriously stop.</P> <P>A packet trace shows the logs are still being sent and the port is remaining open.</P> <P>splunkd.log has something interesting though:</P> <P>01-12-2020 17:25:30.970 +0800 WARN DateParserVerbose - A possible timestamp match (Sun Sep 9 09:48:25 2001) is outside of the acceptable time window. If this timestamp is correct, consider adjusting MAX_DAYS_AGO and MAX_DAYS_HENCE. Context: source=udp:5016|host=pfsense_hostname|pfsense|</P> <P>Any ideas please?</P> Wed, 30 Sep 2020 03:38:40 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/TA-pfsense-logs-start-then-stop/m-p/482213#M59291 j_stock 2020-09-30T03:38:40Z Re: TA-pfsense logs start then... stop https://community.splunk.com/t5/All-Apps-and-Add-ons/TA-pfsense-logs-start-then-stop/m-p/482214#M59292 <P>Okay, the answer is this:</P> <P><A href="https://answers.splunk.com/answers/626816/pfsense-event-date-time-wrong.html">https://answers.splunk.com/answers/626816/pfsense-event-date-time-wrong.html</A></P> Mon, 13 Jan 2020 09:13:29 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/TA-pfsense-logs-start-then-stop/m-p/482214#M59292 j_stock 2020-01-13T09:13:29Z