Help me pls, I using logstash 5.5.0 input JDBC sybase but field type datetime got convert to UTC

Prapat_Polchan · October 18, 2017, 1:48pm

Example

my data field
Default on database
pay_date => "2017-10-18 11:00:00"

But pass to Elasticsearch
pay_date =>"2017-10-18T04:00:00.403Z"

Why my datetime convert to UTC i tried convert via filter
but not work

magnusbaeck · October 19, 2017, 5:55am

ES stores dates in UTC. Unless the UTC conversion was incorrectly done (like, with the wrong offset) I suggest you move on.

Prapat_Polchan · October 19, 2017, 12:35pm

you example filter convert pls.

i tried filter via date{} not work and ruby.

magnusbaeck · October 19, 2017, 1:02pm

Sorry, I don't understand what you're asking.

Prapat_Polchan · October 19, 2017, 1:06pm

i tried

event.set('pay_date', event.get('pay_date').time.localtime('+07:00'))

but not work

Christian_Dahlqvist · October 19, 2017, 4:37pm

Elasticsearch and Kibana requires all date fields to be stored in UTC, and Kibana will automatically adjust for this in the browser based on the users time zone. If you try to store your dates in any other timezone you are likely to experience issues down the line.

system · November 16, 2017, 4:37pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.