Hello everyone, My goal is export alerts from elasticsearch and I have 2 problems left to solve: My current configuration: input { elasticsearch { hosts => "https://ip:9200" index => ".internal.alerts-security.alerts-default-*" user => "user" password => "pass" ssl_certifica…

OK, so you need to tweak the ruby code slightly input { generator { count => 1 lines => [ '{ "@timestamp": "2024-06-11T14:58:20.420Z" }' ] codec => json } } output { stdout { codec => rubydebug { metadata => false } } } filter { ruby { code => ' t = event.get("[@timestamp]"…

Badger June 21, 2024, 10:52am 2

There is an example of that here.

1 Like

Topic		Replies	Views
Convert timezone of @timestamp field Logstash	8	6092	January 30, 2020
Recommended way to force date fields to be UTC Logstash	9	2684	August 31, 2019
Convert UNIX epoch to local time Logstash	6	4824	May 8, 2017
How to change logstash default timezone Logstash	2	662	April 7, 2021
Convert Elasticsearch Date/Time field from UTC To Local Time? Elasticsearch	10	18637	October 4, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Convert the default ES UTC time to local timezone with logstash

Related topics