Filebeat using Fortinet module TZ issue

Elastic Stack Beats
,
10

@Iker @BenB196 @Ameer_Mukadam

Thanks a lot for all the help. I have now solved this issue.

fortinet.yml

- module: fortinet
  firewall:
    input:
      processors:
        - add_fields:
            target: ''
            fields:
              fortinet.firewall.tz: '+1300'
    enabled: true
    var.input: udp
    var.syslog_port: 5514

I also tried add_locale processor as below.

processors:
  - add_locale: ~

This would be preferable as daylight saving changes the offset but add_locale uses "+13:00" as the format which the pipeline does not support.

I might use the script processor to modify the add_local value.