1.How can I convert the default @timestamp (UTC) field coming from elastic to my timezone?
2.How can I query documents only in the last x minutes?(With the current configuration logstash retrieves every document every time it runs.)
That's right. If a document has an [rt] field in UTC it creates another field in localtime (provided localtime is MYT -- it would have to be adjusted for other local timezones).
When you asked "How can I convert the default @timestamp (UTC) field coming from elastic to my timezone?" I thought that was what you wanted.
My goal is to have a field that contains the timestamp coming from the @timestamp field(utc) in my local timezone gmt+2.
I made some changes to the configuration,it creates the timestamp_zoned field but the date is the same as in the original @timestamp field. :
What exactly is the problem? You described an issue and I provided a link to what I thought was a solution. If it is not a solution then I need a better problem definition.
I receive a UTC timestamp from elastic in the @timestamp field.
My goal is to create a new field from that timestamp field in my timezone(GMT+2).
For example:
I have the following the document that is coming from ES.
"@timestamp": [
"2024-06-11T14:58:20.420Z"
],
I want to have a field that contains the time in my local timezone(+2 hours difference):
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.