Logstash don't parse Date field properly


#1

Hi !
I have a date field in my csv file that I try to parse. Following ist my date filter:
date{
match => [ "Date", "ISO8601" ]
timezone => "Europe/Berlin"
target => "Date"
}
my current configured time zone in my operating system is a UTC+1 and in My kibana advanced configuration I have the browser timezone. I have the following output in Kibana:

"time": December 19th 2017, 15:04:49 (the time of my timezone)
"message": 2017/02/06 22:15:30
"Date": February 6th 2017, 23:15:30.000

the output "Date" must be: February 6th 2017, 22:15:30.000; so Kibana output the date with UTC+2.

I configured kibana to have the dateformat:tz to Etc/Utc. it solved this problem (the output date was as expected) the @timestamp in Kibana was in UTC:

"time": December 19th 2017, 14:04:49 (instead of "time": December 19th 2017, 15:04:49)
"message": 2017/02/06 22:15:30
"Date": February 6th 2017, 22:15:30.000

My goal ist to have the following output:

"time": December 19th 2017, 15:04:49 (the time of my timezone)
"message": 2017/02/06 22:15:30
"Date": February 6th 2017, 22:15:30.000

Can you please help me ??


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.