Hi
Working on some dashboards and I’m stuck on how to handle datetimes. Beginner with elasticsearch
Have a bunch off data from a database which I import with logstash. All datetimes without a timezone and the whole project uses dutch times.
Select dates as following from database: 2018-04-10 10:20:17.657
Now in elasticsearch the times are converted to utc so they are displayed incorrectly now.
My plan now is to try convert the datetime in logstash to utc time.
Is this correct approach or would you choose a different one?
Testen with a datefilter like this:
filter {
date {
match => [ "@timestamp", "yyyy-MM-dd HH:mm:ss.SSS" ]
timezone => "Europe/Amsterdam"
}
}
But stuck on the following exception:
"_dateparsefailure
Hope somebody can help me
Kind regards
Tim