Logstash JDBC Input - Time difference problem

[thibaut_a]

Hi, I receive entries from a PostgreSQL database in my Logstash Docker container. I get what I want but I'm facing a problem with the timestamp. When I do a request in pgAdmin, it shows timestamps with the local time (France). When looking on Kibana, each line has a 2-hour-difference with the same one on pgAdmin.

I found other posts on the same topic but no one helped me to find a solution. I also tried to use the "timezone" field in the filter, but it didn't change the output in Kibana.

Here is my current input :

jdbc {
                jdbc_connection_string => "jdbc:postgresql://ip:port/db"
                jdbc_user => "user"
                jdbc_password => "${POSTGRESQL_PASSWORD}"
                jdbc_driver_class => "org.postgresql.Driver"
                statement => "SELECT * FROM my_table WHERE id > :sql_last_value AND (start::date = CURRENT_DATE OR end::date = CURRENT_DATE) ORDER BY id"
                use_column_value => true
                tracking_column => "id"
                tags => ["pg"]
                jdbc_driver_library => "/usr/share/logstash/jdbc/postgresql-42.6.0.jar"
                schedule => "* * * * * Europe/Paris"
        }

The request must send today's lines (and I added a condition on the id to avoid duplicate entries).

I want to show timestamps with 2 less hours than what's currently displayed in Kibana. I can share more configuration or output details if needed.

Thank you in advance.

[Badger]

I suggest your read this thread and the various threads that link to or are linked from it.

[thibaut_a]

The field "jdbc_default_timezone" solves my problem.

Thank you for your help!