Elastic security time zone issue

[frank_rib]

Hello Community,

I have an issue with the TIMEZONE in the SECURITY – ALERTS section, the logs are received in UTC+1 in Discovery and in UTC+3 in SECURITY – ALERTS.

Knowning that the timezone configured at the kibana is in UTC+1.

• Timezone Discovery (UTC)

• Timezone Security Alerts (UTC+3)

Please help me resolve this issue and make the time zone in UTC + 1 in the Security Alerts.

Best regards,

[frank_rib]

Hello,
Can i find any expert to help me to resolve this issue?
Best regards,

[frank_rib]

Hello,

Does anyone have any idea about this issue?

Regards,

[frank_rib]

Hello Community,

Has anyone encountered the same problem before?

Regards,

[wsouza (Wagner Souza)]

Take a look at the docs and check the "event created" and "event.ingest" fields. May be some data source is coming with different timezone.

Check in Kibana under Stack management > Advanced settings how your time zone shown in the figure is configured.