Difference in time between timestamp and @timestamp

Elastic Stack Logstash
1

I have written the date filter as follows

date {
        match => ["timestamp","yyyy-MM-dd HH:mm:ss.SSSSSSSSS"]
        target => "@timestamp"
        timezone => "Asia/Kolkata"
     }

timestamp : 2020-04-17 12:10:15.792310475
@timestamp : Apr 17, 2020 @ 06:40:15.792

I see that there is 5:30 hrs difference between the timestamps.
i tried changing the timezone but it didnt work.

2

It looks like it is doing what you want it to. There is a 5:30 hrs of time difference between UTC (which your timestamp probably represents) and ASIA/Kolkata.

3 
date {
        match => ["timestamp","yyyy-MM-dd HH:mm:ss.SSSSSSSSS"]
        target => "@timestamp"
     }

This is my original date filter. It gave me the above result.
So i tried setting the timezone to Asia/Kolkata.
But it gave me the same result

4

@timestamp is always in UTC, because elasticsearch always stores dates as UTC (kibana then translates them into the browser's timezone). The timezone option on the date filter is used to tell it what timezone the log file uses.

5

Okay. But i tried setting the timeszone but it gives me the same output

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.