Logstash pipeline date filter doesn't work

Elastic Stack Logstash
1

Hi,

I wanted to display timestamp of a certain index in two ways, one in my local timezone (in evt_time field) and the other in Los Angeles timezone (in evt_time_america field).

So I added 'date' filter to my logstash pipeline like below.

	date {
		match => [ "evt_time", "ISO8601", "YYYY-MM-dd HH:mm:ss,SSS" ]
		timezone => "America/Los_Angeles"
		target => "evt_time_america"
	}

But when i check through Kibana both fields (evt_time & evt_time_america) shows the same timestamp.

Is it supposed to be like this? Or is my date filter not working for some reason?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.