A newbie to ELK stack. And met such issue also.
From a system admin/ user view, I should say this is a workaroud, and everything should goes perfect if the logstash just add the supporting to customize the timezone .
Why not add this simple feature? But specify such a complex workaround??