In Logstash config file i renamed received to a completely new field i.e created
where the format of received field is eg 2019-04-23 13:35:46
received is IST format and my kibana is UTC format
rename => [ "received", "created" ]
and
in date plugin in logstash i applied
date {
match => [ "created", "yyyy-MM-dd HH:mm:ss" ]
timezone => "UTC"
target => "@timestamp"
}
Than the query would run in IST or UTC format for created field?
2. IF I change my kibana timezone than created field time is also getting changed
3. Can someone suggest me whether I am right or wrong