Hi,
I wanted to display timestamp of a certain index in two ways, one in my local timezone (in evt_time field) and the other in Los Angeles timezone (in evt_time_america field).
So I added 'date' filter to my logstash pipeline like below.
date {
match => [ "evt_time", "ISO8601", "YYYY-MM-dd HH:mm:ss,SSS" ]
timezone => "America/Los_Angeles"
target => "evt_time_america"
}
But when i check through Kibana both fields (evt_time & evt_time_america) shows the same timestamp.
Is it supposed to be like this? Or is my date filter not working for some reason?