Hope I'm in the right section and will form the right question.
So my situation. I'm using logstash+elasticsearch+kibana for parsin some logs, CSV.
Parsing works perfectly.
I've got two date fieds, submission_time and delivery_time.
I matched the submission_time value to @timestamp and also to the same field for more human readable value.
@timestamp works perfect, correct time zone. While the submission_time and delivery_time show the UTC time.
How can I change the "type of field" to show my local time?
Currently my filter is something like that:
match => [ "submission_time","UNIX" ]
target => "submission_time"
match => [ "delivery_time","UNIX" ]
target => "delivery_time"
I've tried with addint the "timezone" field, but no success.
Can you help?