Allocate time field to a different field

In Logstash config file i renamed received to a completely new field i.e created
where the format of received field is eg 2019-04-23 13:35:46
received is IST format and my kibana is UTC format
rename => [ "received", "created" ]
and
in date plugin in logstash i applied
date {
match => [ "created", "yyyy-MM-dd HH:mm:ss" ]
timezone => "UTC"
target => "@timestamp"
}

Than the query would run in IST or UTC format for created field?
2. IF I change my kibana timezone than created field time is also getting changed
3. Can someone suggest me whether I am right or wrong

elasticsearch always stores dates in UTC. By default, Kibana will display dates in the browser's time zone, but this can be changed in the advanced settings page using dateFormat:tz.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.