Hi,
Am having a problem displaying data. Logstash is receiving logs at 11:44 am but it is displayed as 14:44 (3hrs later - UTC)
Example:
Syslog: Oct 03 11:44:13 XXX.XXX.XXX.XXX new log Logstash @timestamp is 11:44:13 but it is displayed as 14:44:13
How do i fix this?
Sorry,
Fixed it using the following:
date { match => [ "time", "yyyy/M/dd HH:mm:ss" ] timezone => "America/Los_Angeles" target => "@timestamp" }
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.