I've write a custom script that is monitoring my logstashes (3 machines at the moment) - each minute I am writing to my daily index an OK message. If my script detects that there are less than 9 entries for the last 10 minutes - it sends an email and automatically staarts logstash. So far, so good.
I noticed that i receive a bunch of emails from 00:00 to 02:00 GMT+2 (or in other words - from 22:00 - 00:00 UTC) that are saying there are no OK entries in the index. One of my team members noticed also that at 00:00 GMT+2 we don't have an index created, instead we got one at 02:00. GMT+2.
I am wondering is there a way to tell logstash to create the index not in UTC 00:00 but in GMT+2 00:00?