# Logstash-output-syslog plugin with different timezone

**URL:** https://discuss.elastic.co/t/logstash-output-syslog-plugin-with-different-timezone/301650
**Category:** Logstash
**Created:** [April 5, 2022, 3:13pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-plugin-with-different-timezone/301650 "2022-04-05T15:13:49Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![MatthiasLenhardt](https://avatars.discourse-cdn.com/v4/letter/m/a9adbd/32.png) [@MatthiasLenhardt](https://discuss.elastic.co/u/MatthiasLenhardt)
#### Post date: [April 5, 2022, 3:13pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-plugin-with-different-timezone/301650/1 "2022-04-05T15:13:49Z")

</div>

Hi,

we are sending events via logstash-output-syslog plugin to a syslog server. The timestamp of the messages at the syslog server are with timezone UTC. Is it possible to change the timestamp only for these events to different timezone than UTC?

I was thinking about switching to logstash-output-pipe and pipe the events into local "logger" command, but I guess this is ugly.

Thanks in advance  
Matthias

---

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [April 5, 2022, 5:17pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-plugin-with-different-timezone/301650/2 "2022-04-05T17:17:30Z")

</div>

logstash always stores timestamps as UTC. The syslog output [does not include a timezone](https://github.com/logstash-plugins/logstash-output-syslog/blob/30b8f9130878595ab87dfa0fbd4b8f04b0ed7139/lib/logstash/outputs/syslog.rb#L167) on rfc3164 format messages, so if you are using a date filter to parse the timestamp you could tell it the wrong timezone to get the timestamp moved to a different one.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 3, 2022, 5:17pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-plugin-with-different-timezone/301650/3 "2022-05-03T17:17:47Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
