I'm using the date filter to create the @timestamp
field based on a log_timestamp
field
"log_timestamp", "%{year}-%{month}-%{day} %{time},%{ms}"
date {
match => [ "log_timestamp", "YYYY-MM-dd HH:mm:ss,SSS" ]
timezone => "<Log events timezone here>"
}
How can I get the log event's timezone in order to pass this to the date filter?