I have running a server with filebeat to parse all linux centos log files.
My filebeat.yml be default:
- type: log
Output direct to elasticsearch:9200
Until here everything works fine, but I have a problem with @timestamp
Filebeat parse the log with timestamp UTC
We use here America/Sao_Paulo, the diference from UTC.
is possible to parse the logs with filebeat using timezone America/Sao_Paulo.
Actuality I have a delay of 3 hours to see the information parse logs.
Some can help me!