# Abbreviation CST timezone issue when use postgresql filebeat module

**URL:** <https://discuss.elastic.co/t/abbreviation-cst-timezone-issue-when-use-postgresql-filebeat-module/333251>\
**Category:** Beats\
**Tags:** beats-module\
**Created:** [May 12, 2023, 3:26am UTC](https://discuss.elastic.co/t/abbreviation-cst-timezone-issue-when-use-postgresql-filebeat-module/333251 "2023-05-12T03:26:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![yanhj93](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yanhj93/32/114721_2.png) [@yanhj93](https://discuss.elastic.co/u/yanhj93)\
**Post date:** [May 12, 2023, 3:26am UTC](https://discuss.elastic.co/t/abbreviation-cst-timezone-issue-when-use-postgresql-filebeat-module/333251/1 "2023-05-12T03:26:37Z")

</div>

```auto
    filebeat.modules:
    - module: postgresql
      log:
        enabled: true
        var.paths: ["/data/pgdata/pg_log/*.log"]
        input:
          tags: "server"
          processors:
          - drop_fields:
              fields: ["event.timezone"]
              ignore_missing: true
          - add_locale:
              format: offset

```

I was using the postgresql module to parse postgresql logs(filebeat version was 7.14). The problem was `@timestamp` of log document in es after processed by the pipeline was parsed by incorrect event.timezone(which is CST which is ambiguous). actually the server timezone was +0800.  
I have tried a log of ways include above(I noticed the postgresql pipeline parse timestamp with timezone specified in `event.timezone`) and didn't change the result the event.timezone was CST, and @timestamp was ahead five hours. So I came here to get some help.  
What I expected was let the pipeline parse timestamp with right timezone(+0800).

---

<div class="post-metadata">

**Author:** ![yanhj93](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yanhj93/32/114721_2.png) [@yanhj93](https://discuss.elastic.co/u/yanhj93)\
**Post date:** [May 12, 2023, 3:29am UTC](https://discuss.elastic.co/t/abbreviation-cst-timezone-issue-when-use-postgresql-filebeat-module/333251/2 "2023-05-12T03:29:09Z")

</div>

And I have no idea where does the CST come. The server timezone and database timezone are all set to `Asia/Shanghai`.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 9, 2023, 5:29am UTC](https://discuss.elastic.co/t/abbreviation-cst-timezone-issue-when-use-postgresql-filebeat-module/333251/3 "2023-06-09T05:29:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.