# Logstash-output-syslog incorrect time

**URL:** https://discuss.elastic.co/t/logstash-output-syslog-incorrect-time/276554
**Category:** Logstash
**Created:** [June 21, 2021, 2:57pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-incorrect-time/276554 "2021-06-21T14:57:46Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![bambam](https://avatars.discourse-cdn.com/v4/letter/b/9d8465/32.png) [@bambam](https://discuss.elastic.co/u/bambam)
#### Post date: [June 21, 2021, 2:57pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-incorrect-time/276554/1 "2021-06-21T14:57:46Z")

</div>

I'm having an issue with using the logstash-output-syslog plugin. The syslog message header is showing a timestamp for UTC and not the timezone for where I'm located. Can someone provide some input on how to change the time so it's displayed in the correct timezone which is +04.

Below is my current logstash-output config

output {  
syslog {  
host =\> "server-ip"  
severity =\> "debug"  
protocol =\> "udp"  
port =\> 5000  
codec =\> json  
}  
}

Below is my input

input {  
beats {  
port =\> 5044  
client\_inactivity\_timeout =\> 1200  
}  
}

filter {

```
if [winlog][api] == "wineventlog" {

grok { 
	match => { "message" => "(?<message>.*?)\n" }
	overwrite => ["message"] }	

    mutate { replace => ["Message", "%{message}"] }
    mutate { replace => ["Hostname", "%{[host][name]}" ] }
    mutate { replace => ["Severity", "%{[log][level]}" ] }
mutate { copy => ["[@metadata][ip_address]", "[host]" ] }

}

```

}

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 19, 2021, 2:57pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-incorrect-time/276554/2 "2021-07-19T14:57:54Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
