8 hours difference in time zone

Elastic Stack Logstash
1 
elasticsearch { 
					hosts => localhost	  	
					index => "logstash(%{+YYYY.MM.dd})"  
					document_type =>"logstash"
					flush_size=>1000 
				idle_flush_time=>15
					}

i didn‘’t set date in logstash
@timestamp April 1st 2018, 00:13:49.395
_index logstash(2018.03.31)
i don‘t know why

2

That is based on the @timestamp field, which is always in UTC.

3

can i save my time zone logstash(%{+YYYY.MM.dd}?
maybe change @timestamp

4

Elasticsearch assumes timestamps are in UTC, so changing this will likely cause problems in other areas. You may be able to create a separate date string you can use based on the original timestamp.

Why do you need the index name to be based on the local timezone?

5

because i need statistics events daily
but some events before 8 o‘’clock today's Report in the yesterday index

6

What does the original event and timestamp look like?

7

like that 2018-04-03T09:54:24.744Z？

8

Where is your data coming from?

9

logstash stdout

10

Where are you collecting it from? Can you post a sample event?

11

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.