Not able to convert IIS Log Time to Australian Time Zone

[anhlqn (Anh)]

@Nitin_G

date {

match => [ "log_timestamp", "yyyy-MM-dd HH:mm:ss"]

timezone => "Australia/Sydney"

target => "log_timestamp"

}

IIS already stores logs in UTC time, so you just need to tell Logstash that the timestamp is already in UTC

date {
            match => ["log_timestamp", "yyyy-MM-dd HH:mm:ss"]
            timezone => "Etc/GMT"
        }

Kibana will then display the log based on your browser's timezone.