Log data entered wrong index

Hi everyone!

2018-09-17 08:59:59.501 <- this is my log time
and i set my logstash elasticsearch output plugin

host => [""]
index => "log-%{+YYYY.MM.dd}"

So as expected, my log is included 2018.09.17 index but now it is included in 2018.09.16 index.
And 2018-09-17 09:01:01.111 time log included 2018.09.17 index normally.
I think it has something to do with timezone setting ( my server in korea UTD + 9 hour ) but i can't figure out what should i do.

The timestamp used in the index name is based on the @timestamp field which is always UTC. This is not configurable.

Thanks, magnusbaeck. I would change my server time from kr to utc. Thank you.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.