Elasticsearch and Logstash Timestamp error


Am having a problem displaying data. Logstash is receiving logs at 11:44 am but it is displayed as 14:44 (3hrs later - UTC)


Syslog: Oct 03 11:44:13 XXX.XXX.XXX.XXX new log
Logstash @timestamp is 11:44:13 but it is displayed as 14:44:13

How do i fix this?


Fixed it using the following:

   date {
    match => [ "time", "yyyy/M/dd HH:mm:ss" ]
    timezone => "America/Los_Angeles"
    target => "@timestamp"

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.