Filebeats 6.2.3 system module not sending logs

[copenlc]

Hey guys found a solution to my latest issue from this thread. Thank all yall for the help. Marking as solved.

Filebeat 6.2.1 system module does not convert timestamp with timezone

The way the convert_timezone feature works is by installing an Elasticsearch ingest pipeline to do this conversion. Unfortunately, if a previous ingest pipeline already exists, filebeat will not update it with the required changes to make convert_timezone work. You need to delete the existing pipeline manually and restart filebeat: curl -XDELETE 'http://elasticsearch:9200/_ingest/pipeline/filebeat-*'