Hello,
Since upgrading to Filebeat 7.7.0 it seems that the @timestamp is no longer UTC for type: log and it just parses the OS date without any timezone filtering.
I have made sure that the event.timezone is added properly and I have set var.convert_timezone: true in filebeat but nothing seems to help.
Does anyone has any idea on how I might resolved this issue?
This looks like a regression bug that should be fixed as I have found articles describing older version doing this but usually it was resolved with var.convert_timezone: true.
Thank you!