I am getting logs from a firewall which are in GMT timezone. For example firewall sending rt=Jun 16 2023 11:24:40 GMT I want to convert that time to MYT rt=June 16 2023 19:24:40 MYT. How can I do that. filter { grok{ match => {"message" => "%{TIMESTAMP_ISO8601:Timestamp} %{SYSLOGHOST:DeviceName…

I found the solution filter { date { match => ["timestamp1", "MMM dd yyyy HH:mm:ss z"] target => "converted_date" timezone => "GMT" } ruby { code => " event.set('converted_date', event.get('converted_date').time.localtime('+08:00').strftime('%b %d %Y %H:%M:%S MYT')) …

Discuss the Elastic Stack

Convert datetime to another timezone in logstash

Elastic Stack Logstash

leandrojmp (Leandro Pereira) June 16, 2023, 3:33pm 5

This forum post is probably similar to what you want.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.