Log data entered wrong index

Elastic Stack Logstash
1

Hi everyone!

2018-09-17 08:59:59.501 <- this is my log time
and i set my logstash elasticsearch output plugin

elasticsearch{
host => ["127.0.0.1:9200"]
index => "log-%{+YYYY.MM.dd}"
}

So as expected, my log is included 2018.09.17 index but now it is included in 2018.09.16 index.
And 2018-09-17 09:01:01.111 time log included 2018.09.17 index normally.
I think it has something to do with timezone setting ( my server in korea UTD + 9 hour ) but i can't figure out what should i do.

2

The timestamp used in the index name is based on the @timestamp field which is always UTC. This is not configurable.

3

Thanks, magnusbaeck. I would change my server time from kr to utc. Thank you.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.