Changing Time Zone for Elastic

Elastic Stack Elasticsearch
1

Hi, All. Who knows how Kafka will behave when changing time zones? We are soon switching from UTC +6 to UTC +5. Will simply changing the settings in NTP or Chrony resolve this issue? Perhaps someone has practical experience dealing with this?

2

Hi, guys. Please check

3

Hello,

I'm not seem how this is related to any Elastic tool.

Kafka is not an Elastic tool, it is not clear what is your issue here.

4

a sorry. Not Kafka. For Elasticsearch sure

5

UTC stay the same. Everything stored in ES is in UTC time. Kibana present data depend on the browser's timezone.

6

So, what is the issue? Because it is not clear which tool you are talking and what you will change.

The server will change? Your applications changing logs will change?

Elasticsearch uses UTC for every date type, so the timezone where it is running doesn't matter.

For example, if your server was running on UTC+6 and now is running on UTC+5, this has no impact in Elasticsearch because all the dates are stored in UTC.

7

Hi, @leandrojmp. When changing the time zone to utc +5 in the host machine, the time zone of the elastic material did not change, although at this stage the date had changed.
For example, the admins changed the time zone yesterday (March 1 00:00, utc+5), but in the elastic logs we see (March 1 01:00)

8

Yes, this is expected, as mentioned Elasticsearch uses UTC, the timezone where the server is running does not have any impact.

You mean the logs created by the Elasticsearch service or the logs indexed in Elasticsearch, those are two different things?

For the logs of the service it should change, but I'm not sure if a restart is required, I would assume that it is.

For the logs indexed in Elasticsearch, the date time fields will be converted to UTC, it will depend how you are indexing.

9

With index it stored in UTC and we checked, everything is ok.After changind TM we restared ES and VM. But Elasticsearch logs in /var/log/ shown in previuos timezone (UTC +6). We expected it will be show in UTC +5.

10

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.