I'm new one. I had some issue about time message.
when i got log from firewall. time logged 's shown correctly.
but in the raw message , the time changed by plus +7 in timezone without doing anything.
as shown in picture attachment. how can i resolve this ?
If you are parsing the date using a date filter then you can use the timezone option to tell logstash what timezone the log file is in. elasticsearch always stores dates as UTC. kibana, by default, will adjust date/times into the browser's timezone.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.