Elasticsearch and Logstash Timestamp error


(Bardie) #1

Hi,

Am having a problem displaying data. Logstash is receiving logs at 11:44 am but it is displayed as 14:44 (3hrs later - UTC)

Example:

Syslog: Oct 03 11:44:13 XXX.XXX.XXX.XXX new log
Logstash @timestamp is 11:44:13 but it is displayed as 14:44:13

How do i fix this?


(Bardie) #2

Sorry,

Fixed it using the following:

   date {
    match => [ "time", "yyyy/M/dd HH:mm:ss" ]
    timezone => "America/Los_Angeles"
    target => "@timestamp"
  }

(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.