Filebeat 7.3 Timezone Issues with System Module

[Kent_Wang]

I have the same problem, and I submited a fix here. Hope that helps.

Filebeat 7.3 syslog / auth log timezone parsing error

Hi Guys, I think there is something wrong in the system module ingest pipeline related to timezone processing. Here is an excerpt of date processors from pipipeline.json: { "date": { "field": "system.auth.timestamp", "target_field": "@timestamp", "formats": [ "MMM d HH:mm:ss", "MMM dd HH:mm:ss", "ISO8601" ], "ignore_failure": true } }, { "date": { "if": "ctx.event.timezone != null", "field…